BlackBerry Enterprise Server for Microsoft Exchange Version 3.5 Service Pack 1. Administration Guide

Transcription

1 BlackBerry Enterprise Server for Microsoft Exchange Version 3.5 Service Pack 1 Administration Guide

2 BlackBerry TM Enterprise Server Management 3.5 Service Pack 1 for Microsoft Exchange Administration Guide Last revised: 30 October 2002 Part number: PDF At the time of publication, this documentation complies with BlackBerry Enterprise Server for Microsoft Exchange version 3.5 Service Pack Research In Motion Limited. All Rights Reserved. The BlackBerry and RIM families of related marks, images and symbols are the exclusive properties of Research In Motion Limited. RIM, Research In Motion, Always On, Always Connected, the envelope in motion symbol and the BlackBerry logo are registered with the U.S. Patent and Trademark Office and may be pending or registered in other countries. All other brands, product names, company names, trademarks and service marks are the properties of their respective owners. The handheld and/or associated software are protected by copyright, international treaties and various patents, including one or more of the following U.S. patents: 6,278,442; 6,271,605; 6,219,694; 6,075,470; 6,073,318; D445,428; D433,460; D416,256. Other patents are registered or pending in various countries around the world. Visit for a current listing of applicable patents. While every effort has been made to ensure technical accuracy, information in this document is subject to change without notice and does not represent a commitment on the part of Research In Motion Limited, or any of its subsidiaries, affiliates, agents, licensors, or resellers. There are no warranties, express or implied, with respect to the content of this document. Research In Motion Limited 295 Phillip Street Waterloo, ON N2L 3W8 Canada Research In Motion UK Limited Centrum House, 36 Station Road Egham, Surrey TW20 9LF United Kingdom Published in Canada

3 Contents About this guide... 7 Audience...7 Conventions...7 Additional resources...8 In your software package...9 CHAPTER 1 Overview...13 About the BlackBerry Enterprise Server Management user interface...15 About the BlackBerry Enterprise Server Software...18 About the administration software...19 About Mobile Data Service...20 Handheld compatibility...22 CHAPTER 2 Getting started Common administrative tasks...25 Stopping/starting the BlackBerry Enterprise Server services...26 Adding a server...28 Adding users to a server...29 Connecting the handheld using the cradle...33 Enabling/disabling redirection...35 Moving desktop users to the server...37 CHAPTER 3 Getting started Mobile Data Service properties and tasks...39 Configuring Mobile Data Service properties...40 Configuring Mobile Data Service properties...41 Setting Mobile Data Service centralized push server...49 Enabling Mobile Data Service...49 Disabling the Mobile Data Service...51 CHAPTER 4 Assigning properties across all servers...53 Configuring handheld licenses...54 Configuring communication settings...55 Administration Guide 3

4 Configuring database information...56 Configuring visual settings...57 Configuring BlackBerry Enterprise Server Management logging...59 CHAPTER 5 Administering individual server properties...63 Viewing/editing system information...64 Server level global redirection filter tasks...66 Configuring a disclaimer...72 Setting auto BCC addresses...73 Enabling S/MIME encryption at the server level...74 Configuring BESAlert notification...75 Configuring BlackBerry Enterprise Server logging...78 CHAPTER 6 Administering individual user properties...81 Viewing user properties...82 Performing user level filter tasks...84 Enabling S/MIME encrypted messages for user...90 Generating encryption keys...91 Understanding IT Admin properties...93 CHAPTER 7 Performing server maintenance tasks...95 Viewing server statistics...96 Refreshing the database...97 Updating -to-PIN mapping...97 Updating peer-to-peer encryption key...98 Reloading users...99 Monitoring redirection...99 Clearing user statistics Changing a user s handheld Moving a user Removing users Removing a server Stopping a server Clearing In-cradle status Purging pending messages Importing system information Exporting user information Sending a message Administration Guide

5 Sending an All Points Bulletin CHAPTER 8 Managing IT Policy IT administration tasks Configuring IT policy settings Editing a policy userlist CHAPTER 9 IT Policy settings IT policy item settings CHAPTER 10 Understanding and monitoring Mobile Data Service Mobile Data Service architecture Mobile Data Service connections Clients and servers Monitoring the Mobile Data Service CHAPTER 11 Using the command line utilities Backup and Restore utility HandheldCleanup.exe utility Fix Mapisvc.inf utility BlackBerry Server Permissions tester SRP Connection tester Performance Monitor Repair tool BlackBerry Database Consistency Service utility CHAPTER 12 Frequently asked questions CHAPTER 13 Error and Event messages Startup error Windows error Windows error No Service Name Error (5403 or 5404) No routing groups found in the BlackBerry Enterprise Server Management console BlackBerry User Administration service error codes Index Administration Guide 5

6

7 About this guide Audience Conventions This BlackBerry Enterprise Server for Microsoft Exchange Administration Guide will help you configure and use the server administration tools that you install. The main administration tool for the BlackBerry Enterprise Server is BlackBerry Enterprise Server Management (which provides access to the additional functionality of Mobile Data Service if you install it); you might also have installed BlackBerry User Administration, and the BlackBerry Server utilities. This document is separated into chapters according to the types of tasks for which you can use the BlackBerry Enterprise Server administration tools; when there is a recommended order to the task lists, it is stated. Refer to "Getting started Mobile Data Service properties and tasks" on page 39 for more information if you installed Mobile Data Service, before beginning with general administration tasks, and complete any procedures that are noted as required. The audience for this guide is Information Technology administrators with knowledge of implementing and managing Microsoft Exchange. The administrator should have previously completed the BlackBerry Enterprise Server for Microsoft Exchange installation. You should understand the following conventions that are used in this guide.

8 About this guide Notes, Tips, and Warnings Note: Notes contain important information on the associated topic. Warning: Warnings advise you that failure to take or avoid a specific action can result in data loss or physical damage. Tip: Tips provide optional or time-saving information on the associated topic. Additional resources After you install the software, all documentation is located in the Docs directory, with the installed software. BlackBerry Enterprise Server Management Software offers online Help to guide you and answer your questions. To open the online Help, click Help in the Help menu of any active window. Refer to the BlackBerry Enterprise Server for Microsoft Exchange 2000 Installation and Getting Started Guide or the Microsoft Exchange 5.5 Installation and Getting Started Guide for more information about installing the BlackBerry Enterprise Server Software. Refer to the BlackBerry Enterprise Server Overview Guide for overview information about the BlackBerry Enterprise Server features. 8 BlackBerry Enterprise Server Software for Microsoft Exchange

9 About this guide Overview documentation Title BlackBerry Enterprise Server Overview Guide Location on installation CD Root_directory:\Docs\Overview Guide.pdf Installation documentation Title BlackBerry Enterprise Server for Microsoft Exchange 2000 Installation and Getting Started Guide BlackBerry Enterprise Server for Microsoft Exchange 5.5 Installation and Getting Started Guide Location on installation CD Root_directory:\Docs\Installation with Microsoft Exchange 2000.pdf Root_directory:\Docs\Installation with Microsoft Exchange 5.5.pdf Administration documentation Title BlackBerry Enterprise Server Software Administration Guide Location on installation CD Root_directory:\Docs\Administration Guide.pdf If any of these components are missing, contact your point of purchase of your license for BlackBerry Enterprise Server Software. In your software package Your BlackBerry Enterprise Server Software package should contain the following items: BlackBerry Enterprise Server Software and additional tools BlackBerryServer.exe BESAlert.exe dbghelp.dll Description This program redirects from the user's Microsoft Exchange mailbox to the BlackBerry handheld This program monitors the Windows NT Event Log and can be configured to send notification to defined users when specified event levels are logged This.dll file is a helper file for debug logging Administration Guide 9

10 About this guide BlackBerry Enterprise Server Software and additional tools C:\WINNT\System32\BESPerfInfo.dll C:\Program Files\Research In Motion\BlackBerryEnterprise Server\BlackBerryServerSNMPAgent. dll BESManMMC.msc createdb.exe Description This.dll file enables administrators to view dynamic Global Statistics This.dll file enables administrators to view dynamic Global Statistics This BlackBerry Enterprise Server Management (MMC Snap-in) Software is used to administer the BlackBerry Enterprise Server This program creates the BlackBerry Enterprise Server Management (MMC Snap-in) database; the database can also be created during the installation of the BlackBerry Enterprise Server Management Software Utilities BESProfile.exe DBConsistency.exe BBUserAdminClient.exe BBUserAdminService.exe BBPerfMonInstall.exe BBSRPTest.exe BlackBerryBackup.exe Description This GUI program enables you to edit the MAPI profile being used by the BlackBerry Enterprise Server Mobile Data Service s database consistency utility; runs every 24 hours unless the default value is changed on the Mobile Data Service Properties Push Server tab This program enables administrators to add, delete, or list users on a specified BlackBerry Enterprise Server This service executes the requests made by the BBUserAdminClient This utility repairs the installation of the BlackBerry Enterprise Server Performance Monitor.dll file This utility tests the SRP connection to the wireless network This utility enables backup of BlackBerry Enterprise Server and its users 10 BlackBerry Enterprise Server Software for Microsoft Exchange

11 About this guide Utilities FBUpdate.exe HandheldCleanup.exe IEMSTest.exe fixmapisvc.exe Description This utility is a helper program used by the BlackBerry Enterprise Server to force updates to Microsoft Outlook free/busy information This utility enables administrators to retrieve and update configuration for individual BlackBerry Enterprise Server users as well as the configuration information for each BlackBerry Enterprise Server This utility tests the permission requirements for a BlackBerry Enterprise Server This utility should be run before creating a new MAPI Profile when the MAPI Profile cannot be found Note: Each command-line utility includes a usage parameter, which offers more extensive information on each utility. 11 BlackBerry Enterprise Server Software for Microsoft Exchange

12 About this guide 12 BlackBerry Enterprise Server Software for Microsoft Exchange

13 Chapter 1 Overview This section provides information on the following topics: About the BlackBerry Enterprise Server Management user interface About the administration software About Mobile Data Service Handheld compatibility

14 Chapter 1: Overview This guide assumes that you installed the BlackBerry Enterprise Server Software with, at minimum, the BlackBerry Enterprise Server Management console. This guide provides administration information for BlackBerry Enterprise Server Management Software version 3.5, including chapters on using the following tools: BlackBerry User Administration, Mobile Data Service, and command-line utilities. You can install any or all of these tools. The BlackBerry Enterprise Server consolidates the operation of individual BlackBerry Desktop Redirectors into a server that the IT department can monitor and control. The server also supports laptop users and enables computer users to turn off their computers at the end of the day. IT departments manage the centralized administration and control of mobile , and users can continue to configure redirection options using the BlackBerry Desktop Software on their computers. The BlackBerry Enterprise Server Management Software functions as a snap-in to the Microsoft Management Console. The BlackBerry Enterprise Server Management Software enables you to administer BlackBerry Enterprise Server(s) in a native environment(microsoft Exchange 2000 or Microsoft Exchange 5.5), or mixed (both Microsoft Exchange 2000 and Microsoft Exchange 5.5) environment. From the BlackBerry Enterprise Server Management console, you can administer users at a server level and a mailbox level. The BlackBerry Enterprise Server Management Software includes a Microsoft Database Engine (MSDE) or SQL database (to store data relevant to the BlackBerry Enterprise Server(s) and administration mailboxes), and the BlackBerry Enterprise Server Management console (the interface that enables administration of the BlackBerry Enterprise Server(s) and its users). Note: BlackBerry Enterprise Server Management can be used with the BlackBerry Enterprise Server 2.0 or later, although some options might not be available with earlier server versions. 14 BlackBerry Enterprise Server Software for Microsoft Exchange

15 About the BlackBerry Enterprise Server Management user interface About the BlackBerry Enterprise Server Management user interface BlackBerry Enterprise Server Management console The BlackBerry Enterprise Server Management interface is divided into a Tree view pane (left side) and a Result view pane (right side). In the Tree view pane, you can access the BlackBerry Server Management level actions, site/routing group level actions, and server level actions. To view site/routing groups that are set up in Microsoft Exchange, expand the BlackBerry Enterprise Server Management object. Expand a site/routing group object to view the servers that are added to that group. Administration Guide 15

16 Chapter 1: Overview When servers are displayed, the color of the server icon indicates the server s availability and Server Routing Protocol (SRP) status. The result pane also provides a text listing of the SRP status. The various colors of the server icons are as follows: SRP and Server Status indicators Blue Black Description The server status has not been determined. This occurs when the status has not been checked automatically, which is the case only if the Show server status information only for selected servers option is enabled in the BlackBerry Enterprise Server Management Properties window, on the Advanced tab). Refer to "Configuring visual settings" on page 57 for more information on enabling/disabling this option. The BlackBerry Enterprise Server computer is unavailable (it might be turned off, or the network connection might be lost, and so on). Red The BlackBerry Enterprise Server is not running (it might be in the process of stopping). Yellow The BlackBerry Enterprise Server status is unknown. This status can mean several things, which are displayed in the text portion (service not installed, access denied, and so on). If the status of the server cannot be determined, you are not able to start or stop the server. Green The BlackBerry Enterprise Server is running. A solid green indicates that the server is running and the SRP status is connected. A white and blue question mark over the server means the SRP status is unknown. 16 BlackBerry Enterprise Server Software for Microsoft Exchange

17 About the BlackBerry Enterprise Server Management user interface SRP and Server Status indicators Green with Red X Greyed Out Grey with Red X Description The BlackBerry Enterprise Server is running but is NOT connected to SRP. The BlackBerry Enterprise Server is in a read-only state. The Microsoft Exchange Server that the administration mailbox is on is stopped; no users are visible, and you cannot connect to the mailbox until the BlackBerry Enterprise Server Management console is restarted while the Microsoft Exchange Server is running. Servers can be started or stopped from the BlackBerry Enterprise Server Management console. There are several ways to start or stop a server: Right-click a server icon to display the Start Server option (if the server is currently stopped) or the Stop Server option (if the server is currently running). When a server is selected, a play button and a stop button appear on the toolbar. Selecting the play button starts the service; selecting the stop button stops the service. When you select a site/routing group, the server statistics are displayed in the (right) results pane for each of the servers. You can configure these results to be updated automatically. The refresh frequency for user settings and server settings is configurable through the BlackBerry Enterprise Server Management console s Properties (refer to Configuring visual settings on page 57 for more information).the server statistics are also updated each time that the list is displayed. The SRP status is updated when the server is selected, or when a refresh (F5) is performed at the site/routing group level. Refreshing removes and reads all the servers to pick up any servers that might have been added or removed by another session. When a server is selected, the user statistics appear in the results pane. The user and statistical information can be configured to be updated automatically. To update the list of users and the user statistics, use refresh (F5) when you view the user list. The selection of multiple users simultaneously and the ability to drag-and-drop users (to move them from one server to another) are two new functions of BlackBerry Enterprise Server Management. Administration Guide 17

18 Chapter 1: Overview About the BlackBerry Enterprise Server Software BlackBerry is a mobile solution that consists of the handheld, docking/charging cradle, and desktop software on a wireless network. The BlackBerry Enterprise Server centralizes redirection for handheld users in an organization. The server software performs the following functions for each user: monitors the user s mailbox for new mail applies filters (defined by the user or the administrator) to new messages, to determine if and how the BlackBerry service relays the message to the user s handheld compresses and encrypts new messages and delivers them to the handheld over the Internet receives, over the Internet, messages that are composed on the handheld, and then decrypts and decompresses the messages and places them in the user s Outbox for the corporate Microsoft Exchange Server to deliver The BlackBerry Enterprise Server runs as a Windows NT/2000 service that can monitor many users at once over a single administrative connection to the Microsoft Exchange Server. The BlackBerry Enterprise Server maintains a direct TCP/IP connection (Server Routing Protocol or SRP) to the wireless network. This mode of connection requires that you configure your corporate firewall to enable the BlackBerry Enterprise Server to connect through port This is not a hole in the firewall; only an outbound connection is required. 18 BlackBerry Enterprise Server Software for Microsoft Exchange

19 About the administration software The illustration below shows an example of events that occur when an external message is sent to a handheld user on the BlackBerry Enterprise Server. BlackBerry Enterprise Server message flow About the administration software BlackBerry Enterprise Server can be administered by BlackBerry Enterprise Server Management, whether you are installing in a Microsoft Exchange 5.5 environment, a Microsoft Exchange 2000 environment, or a mixed mode environment (where a Microsoft Exchange 2000 Server is added to an existing Microsoft Exchange 5.5 environment). Administration Guide 19

20 Chapter 1: Overview About BlackBerry Enterprise Server Management To administer BlackBerry Enterprise Server(s), you must install BlackBerry Enterprise Server Management Software. BlackBerry Enterprise Server Management functions as a snap-in to the Microsoft Management Console. From the BlackBerry Enterprise Server Management console, you can administer users at the server level and mailbox level. The BlackBerry Enterprise Server Management Software includes a Microsoft Data Engine (MSDE) or SQL database (to store data relevant to the BlackBerry Enterprise Server(s) and administration mailboxes), and the BlackBerry Enterprise Server Management console (the interface that enables administration of the BlackBerry Enterprise Server(s) and its users). Note: BlackBerry Enterprise Server Management can be used with the BlackBerry Enterprise Server version 2.0 or later. About BlackBerry User Administration Software The BlackBerry User Administration service client is a command prompt administration utility that enables users to remotely add, delete, or list users for a specific BlackBerry Enterprise Server. BlackBerry User Administration service client users are not required to have administration permission on a BlackBerry Enterprise Server. Before you can use the BlackBerry User Administration client, you must install the BlackBerry User Administration service on a server. About Mobile Data Service The Mobile Data Service is a new feature of this release. The Mobile Data Service manages and alters information so that it can pass between the intranet and the BlackBerry handheld more efficiently. Direct flow between the handheld application and a network server does not occur; all information must pass through the Mobile Data Service first. As the intermediary agent, the Mobile Data Service can perform two functions: 20 BlackBerry Enterprise Server Software for Microsoft Exchange

21 About Mobile Data Service Data conversion: As a proxy, Mobile Data Service intercepts information that passes between handheld applications and the content server. Data conversion might be necessary if the content returning from the server is not appropriately formatted for the application s needs. Data routing: As a channel, Mobile Data Service passes information back and forth between the handheld application and the content server. The information transferred is untouched the content sent by the application and the content sent by the server are not altered before being passed on to their destinations. When you install the Mobile Data Service, you must enable it before you continue with other administration tasks. Refer to "Getting started Mobile Data Service properties and tasks" on page 39 for more information. Refer to "Understanding and monitoring Mobile Data Service" on page 151 for more information on Mobile Data Service background concepts. Note: The Mobile Data Service is a medium for data transmission. The customer is responsible for the applications on the handheld and the server that transmit and receive such data, and for the compatibility of applications with the Mobile Data Service. RIM is not responsible for the functionality or compatibility of such applications, nor for the data passing through the Mobile Data Service. About S/MIME and Mobile Data Service The current BlackBerry infrastructure provides secure transport between your organization s network and the BlackBerry Wireless Handheld using Triple Data Encryption Standard (DES) encryption technology. This means that that is delivered to handhelds is as secure as the messages that are delivered to a personal computer on your organization s network. Secure Multipurpose Internet Mail Extensions (S/MIME) offers an additional layer of security between the sender and recipient of an message. S/MIME technology enables end-to-end authentication and confidentiality, and protects data integrity and privacy from the time at which the originator of the message sends it over the wireless network, until it is decoded and read by the message recipient. S/MIME is enabled at the server level (through the BlackBerry Enterprise Server Management console), and on the handheld. The Mobile Data Service parameters for Online Certificate Status Protocol (OCSP) properties and Lightweight Directory Access Protocol (LDAP) are required for S/MIME Administration Guide 21

22 Chapter 1: Overview digital signing to work. Configure Mobile Data Service Parameters through the BlackBerry Enterprise Server s Mobile Data Service Properties window in the BlackBerry Enterprise Server Management console. Refer to the BlackBerry Wireless Handheld with S/MIME Support User Guide Supplement on the BlackBerry web site ( for more information about S/MIME. Warning: Before users can send and receive S/MIME messages, they must install the BlackBerry Desktop Manager with S/MIME Support and update their handhelds to support S/MIME services. After S/MIME is enabled, they can send and receive encrypted messages, attach a signature to outgoing messages, and perform wireless certificate searches. About the Browser On the RIM 850 Wireless Handheld, RIM 857 Wireless Handheld, RIM 950 Wireless Handheld, and RIM 957 Wireless Handheld, the Browser only works with the Mobile Data Service. The Mobile Data Service must be enabled for users to use the Browser. On the BlackBerry 5800 Series and BlackBerry 6700 Series of wireless handhelds, the Browser works with two types of gateways: a WAP gateway that is operated by the network operator, or the Mobile Data Service (MDS). The Mobile Data Service must be used to access corporate intranets, but it can also be used to access the Internet. Support for WAP or MDS depends on provisioning by the network operator. The Mobile Data Service uses a protocol called the IP Proxy Protocol (IPPP) to communicate with the handheld. Communication between the handheld and the Mobile Data Service is encrypted in the same way as . Handheld compatibility Handhelds running with BlackBerry Desktop Software version 2.0 or higher are compatible with BlackBerry Enterprise Server version 3.5. However, please note that a handheld with software version 2.0 will not support the wireless calendar synchronization feature, as BlackBerry Desktop Software version 2.1 and BlackBerry Handheld Software version 2.1 (or later versions of the software) must be used in conjunction with BlackBerry Enterprise Server version 2.1 (or later versions of the software) in order to support this feature. 22 BlackBerry Enterprise Server Software for Microsoft Exchange

23 Handheld compatibility The wireless synchronization of IT Policy settings and IT Admin commands are available only with version 2.5 of the handheld software for the RIM 850 Wireless Handheld, RIM 857 Wireless Handheld, RIM 950 Wireless Handheld, and RIM 957 Wireless Handheld and with version 3.6 of the handheld software for the BlackBerry 5800 Series and BlackBerry 6700 Series of wireless handhelds. The Global Address Lookup feature is available only with version 2.5 of the handheld software for the RIM 850 Wireless Handheld, RIM 857 Wireless Handheld, RIM 950 Wireless Handheld, and RIM 957 Wireless Handheld and with version 3.6 of the handheld software for the BlackBerry 5800 Series and BlackBerry 6700 Series of wireless handhelds. Administration Guide 23

24

25 Chapter 2 Getting started Common administrative tasks This section provides information on the following topics: Stopping/starting the BlackBerry Enterprise Server services Adding a server Adding users to a server Connecting the handheld using the cradle Enabling/disabling redirection Moving desktop users to the server

26 Chapter 2: Getting started Common administrative tasks BlackBerry Enterprise Server Management enables the administration of the BlackBerry Enterprise Server Management console through the Action menu items that appear when BlackBerry Management is selected in the Tree view pane, or through the BlackBerry Enterprise Server Management Properties window. Additional tasks that apply to all servers are available through the Action menu items that appear when an active site/routing group is selected in the Tree view pane. Stopping/starting the BlackBerry Enterprise Server services Note: Mobile Data Service is automatically enabled when you start the BlackBerry Enterprise Server service. The services are installed as automatic services, and they are started automatically after the installation or upgrade. This writes the host name of the BlackBerry Enterprise Server computer to the administration mailbox. If you need to stop and restart the services at any time, complete one of the following procedures: Starting/stopping services through Windows Services If you are using Windows NT: 1. From the Start button, select Settings > Control Panel to open the Control Panel window. 2. Double-click Services. The Services window appears. 3. Stop/Start services: Select the BlackBerry Server item. Right-click and select Stop to stop the service. Select the BlackBerry Server item. Click Startup... to start the BlackBerry Enterprise Server service. Verify that the BlackBerry Enterprise Server service account name appears in the Account field. Change the service startup to Automatic and click OK. Click Start to start the BlackBerry Server service. Select the BlackBerry Mobile Data Server item. Click Stop or Start to stop or start the Mobile Data Service. 26 BlackBerry Enterprise Server Software for Microsoft Exchange

27 Stopping/starting the BlackBerry Enterprise Server services BESAlert and the BlackBerry Database Consistency Service can also be stopped and started through Services. 4. Close the window. If you are using Windows 2000: 1. From the Start button, select Programs > Administrative Tools > Services to open the Services window. 2. Stop/Start services: Select the BlackBerry Server item. Right-click and select Stop or Start to stop or start the BlackBerry Enterprise Server service. Select the BlackBerry Mobile Data Server item. Right-click and select Stop or Start to stop or start the Mobile Data Service. BESAlert and the BlackBerry Database Consistency Service can also be stopped and started through Windows Services. 3. Close the window. Starting/stopping services through BlackBerry Enterprise Server Management 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. In the Tree view, expand a routing group and right-click a BlackBerry Enterprise Server. 3. Stop/Start services: Select Stop Server or Start Server to stop or start the BlackBerry Enterprise Server. Select Stop Mobile Data Service or Start Mobile Data Service to stop or start the Mobile Data Service. Now that you have set up the appropriate accounts, installed the executables and created a BlackBerry Enterprise Server, you are ready to use the server and its tools. Administration Guide 27

28 Chapter 2: Getting started Common administrative tasks Adding a server One of the first administrative tasks is to add a BlackBerry Enterprise Server to the BlackBerry Enterprise Server Management console so that the server can be administered through the console. This task occurs at the site/routing group level. If a site/routing group is inactive, you cannot add BlackBerry Enterprise Servers to it. A site/routing group might be inactive if you (the Administrator) do not have permissions to the Microsoft Exchange Server, or if a Microsoft Exchange Server is currently unavailable. The following section describes the server settings. For a detailed procedure on how to add a server, refer to the Post-installation procedures chapter of the BlackBerry Enterprise Server for Microsoft Exchange 5.5 Installation and Getting Started Guide or BlackBerry Enterprise Server for Microsoft Exchange 2000 Installation and Getting Started Guide. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Click the plus sign next to a BlackBerry Server site/routing group to expand the item and view its servers, if any exist. Right-click and select New BlackBerry Server. The BlackBerry Enterprise Server System Info window appears. BlackBerry Enterprise Server System Info window 28 BlackBerry Enterprise Server Software for Microsoft Exchange

29 Adding users to a server Server information Server Name SRP Identifier SRP Authentication Key Host Routing Information Administration Mailbox Description This field specifies the server name that you used during installation of the BlackBerry Enterprise Server that you are adding. This field specifies the SRP Identifier value that is located on the BlackBerry Enterprise Server installation CD label. This field specifies the SRP Authentication Key value that is located on the BlackBerry Enterprise Server installation CD label. If host routing information was also provided on the BlackBerry Enterprise Server installation CD, in this field you can define the necessary information to connect to the mobile network. Warning: You should only define values in this field if values are provided with the installation material. If you are using the default Network Access Node (the SRP Address value that is provided on your installation CD label), or are uncertain which values to use, leave this field blank. If you define incorrect values in this field, connection to the mobile network is not possible. This field specifies the mailbox that you created for BlackBerry Enterprise Server administration (this must be the same mailbox that you used during the installation). Click Check Name to verify that there are no ambiguities within the mailbox name. For each server that you add, you can install up to four BlackBerry Enterprise Server services on the corresponding computer. To prevent a loss of service, verify that the SRP Identifier and SRP Authentication Keys are unique for each BlackBerry Enterprise Server. Adding users to a server When you add users, one of the following scenarios applies: User was neither on BlackBerry Enterprise Server nor BlackBerry Desktop Software: You have added the user to the server, and the user Administration Guide 29

30 Chapter 2: Getting started Common administrative tasks should install the desktop software, if possible. The desktop software provides the user with configuration options for PIM and redirection filters. User was a previous BlackBerry Desktop Software user: The user is now a BlackBerry Enterprise Server user. The BlackBerry Desktop Redirector continues to forward that user s messages until the handheld is connected to the user s desktop, at which time BlackBerry Enterprise Server redirection is activated for that PIN. Until the handheld is connected to that user s desktop, the Redirector window Status field displays two asterisks (**) before the name of the BlackBerry Enterprise Server, indicating that the user must connect. The user does not have to load new application software onto the handheld for redirection to continue at the server level. User was previously on another BlackBerry Enterprise Server: You moved the user to the selected server. The user must connect the handheld to the desktop to move completely to the selected server. If the user does not have the BlackBerry Desktop Redirector running, is not redirected to the handheld until the handheld is connected to the computer. Note: If you add users without connecting their handhelds to the server, the users should connect their handheld to their computer for PIN recognition and key encryption. If the users were on another BlackBerry Enterprise Server previously, handheld connection is still necessary for proper routing. The users Redirector Status field indicates on which BlackBerry Enterprise Server the handheld is registered. Adding users from a list Note: This is the only option that enables you to add users that are hidden from the Global Address List. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item. Right-click the name of the server to which you want to add users. Click Add Users > Add Selected Users. The Select Users window appears. This window lists only users who are not currently on the selected server, and who are in the 30 BlackBerry Enterprise Server Software for Microsoft Exchange

31 Adding users to a server same site/routing group as the BlackBerry Enterprise Server to which you are adding users. Select Users window 3. From the Select Users list, select the user, or multiple users, that you want to add. To select multiple users, hold CTRL while you select users. 4. Click Add. You can continue to add users by repeating steps 4 and 5. When you finish adding users, click Close. Importing users from file You can use a tab-delimited text file to define the users that you want to add to the BlackBerry Enterprise Server. The import file should be a tab-delimited text file that lists the user's mailbox name, PIN, and enable state. You can create this file manually. You can also export a tab-delimited list without statistics from the user list in BlackBerry Enterprise Server Management and verify that it contains the required information in the required format. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item, and then right-click the name of the server to which you want to add users. Click Add Users > Import Users from File. A directory dialog box appears. Administration Guide 31

32 Chapter 2: Getting started Common administrative tasks 3. Browse to the directory location of the text file from which you want to add users and double-click it. The import file should be tab-delimited and list the user's mailbox name, PIN, and enable state. On import, each mailbox name is resolved against the Global Address Book on the system. Any name ambiguities or conflicts open the Outlook Check Names window. Mailboxes that are listed in the import file do not need to be on the same site/routing group as the BlackBerry Enterprise Server. Importing users from the Global Address Book You can add users by selecting a mailbox from the Global Address Book and selecting the users that you want to add. The mailbox that you choose does not have to be in the same Microsoft Exchange site/routing group as the BlackBerry Enterprise Server. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item, and then right-click the name of the server to which you want to add users. Click Add Users > Global Address Book. 32 BlackBerry Enterprise Server Software for Microsoft Exchange

33 Connecting the handheld using the cradle 3. The Select Mailbox dialog box appears. Select Mailbox dialog box 4. From the Show Names from the drop-down list, select the address book from which you want to add users. 5. In the user list, select the users that you want to add, and click Select to move them to the selected list. 6. When you finish selecting users, click OK. Connecting the handheld using the cradle Users can connect their handheld to their computers for PIM synchronization, data backup, and encryption key generation. Likewise, System Administrators can use the cradle for user registration, encryption keys, and maintenance. Note: You should use only the cradle that is provided by Research In Motion Limited. 1. Connect the end of the cradle cable to a COM port on the back of the computer on which server administration is being performed. If another handheld is already connected, or the port is being used for another Administration Guide 33

34 Chapter 2: Getting started Common administrative tasks purpose, it must be disabled or the server computer cannot detect the cradle connection. 2. Secure the handheld in the cradle by inserting the connector port on the bottom edge of the handheld into the connector prongs of the cradle. 3. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 4. In the left pane, select BlackBerry Server Management. 5. Right-click and click Properties, or click Action > Properties. The BlackBerry Enterprise Server Management Properties window appears. 6. Click the COM Port tab. BlackBerry Server Management Properties window COM Port tab 7. To detect the correct COM Port, click Detect. The correct COM Port is selected automatically from the drop-down list. If the software cannot detect the handheld on a serial port, the message Device not found appears in a dialog box. Tip: If the handheld is inserted in the cradle and in BlackBerry Enterprise Server Management, you open a user s Properties window, you are asked if you want to assign the handheld to that user. 34 BlackBerry Enterprise Server Software for Microsoft Exchange

35 Enabling/disabling redirection Note: If the error message still appears and the handheld and cradle cable both appear to be connected securely, verify that no other handhelds are sharing the serial port. Enabling/disabling redirection You can stop message redirection to a handheld without removing the user from the server. You might want to use this function if, for example, a user is traveling out of a wireless coverage area for an extended period and does not want messages forwarded to the handheld during that time. To suspend redirection to that handheld, disable it. You can enable it again at any time. The user still has the ability to re-enable redirection on the handheld. Note: The Enable Handheld and Disable Handheld functions switch from one function to the other based on whether redirection is occurring. By default, users are enabled when they are first added to a BlackBerry Enterprise Server. Enabling redirection You can enable the redirection of messages to the user s handheld using either of the following methods. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item. Select a server name. 3. In the User Name list, right-click a user name and select Enable Redirection. Or Administration Guide 35

36 Chapter 2: Getting started Common administrative tasks 1. In the User Name list, right-click a user name and click Properties. The user s Properties window appears. user s Properties window Redirection tab 2. Click the Redirection tab. 3. Select the Redirect incoming messages to user s handheld check box to enable redirection. The user s status on the General tab now displays the message Redirection enabled above the Status field. Disabling redirection While redirection is disabled, the user can still send messages but cannot receive them. You can disable redirection of messages to the user s handheld using either of the following methods. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item. Select a server name. 3. In the User Name list, right-click a user name and click Disable Redirection. 36 BlackBerry Enterprise Server Software for Microsoft Exchange

37 Chapter 2: Getting started Common administrative tasks Or 1. In the User Name list, right-click a user name and click Properties. The user s Properties window appears. User s Properties window Redirection tab 2. Click the Redirection tab. 3. To disable redirection, clear the Redirect incoming messages to user s handheld check box. The user s status on the General tab displays the message Redirection disabled above the Status field. Note: If an administrator inserts the handheld into the cradle at the BlackBerry Enterprise Server Management computer, the status field is not updated and still indicates Running. The status field updates to In cradle - redirection to handheld disabled only when the users insert their handhelds in the cradle at their desktops. Moving desktop users to the server If the user that you moved to the server was using the BlackBerry Desktop Software for redirection, the BlackBerry Desktop Redirector continues to forward that user s until the handheld is connected (either at the 37 BlackBerry Enterprise Server Software for Microsoft Exchange

38 Chapter 2: Getting started Common administrative tasks server or desktop) and BlackBerry Enterprise Server redirection is activated for that PIN. The user does not have to load new application software onto the handheld for redirection to continue at the server level. In the user s Properties window, you can check the Status field to see on which BlackBerry Enterprise Server the handheld is registered. 38 BlackBerry Enterprise Server Software for Microsoft Exchange

39 Chapter 3 Getting started Mobile Data Service properties and tasks This section provides information on the following topics: Configuring Mobile Data Service properties Configuring Mobile Data Service properties Setting Mobile Data Service centralized push server Enabling Mobile Data Service Disabling the Mobile Data Service

40 Chapter 3: Getting started Mobile Data Service properties and tasks After you install the BlackBerry Enterprise Server Software, if you installed the Mobile Data Service option, you must configure Mobile Data Service properties and enable the Mobile Data Service push server before you can use the BlackBerry Enterprise Server. Refer to "Understanding and monitoring Mobile Data Service" on page 151 for more information about the Mobile Data Service. Configuring Mobile Data Service properties Note: To use the Mobile Data Service, a user s handheld must contain the appropriate IPPP service book entries. On the RIM 850 Wireless Handheld, RIM 857 Wireless Handheld, RIM 950 Wireless Handheld, and RIM 957 Wireless Handheld, these service books are installed by default. On the BlackBerry 5800 Series and BlackBerry 6700 Series of wireless handhelds, the Internet Protocol Proxy Protocol (IPPP) service book must be provisioned by the network operator as part of handheld registration. Before you begin Before you enable the Mobile Data Service at the server and user level, complete the following procedures (which are documented in the BlackBerry Enterprise Server for Microsoft Exchange 5.5 Installation and Getting Started Guide and the BlackBerry Enterprise Server for Microsoft Exchange 2000 Installation and Getting Started Guide):! Install the BlackBerry Enterprise Server with Mobile Data Service.! Install or upgrade the BlackBerry Enterprise Server Management database. Warning: The Mobile Data Service service account requires permission to read from and write to the BlackBerry Enterprise Server Management database.! Add the BlackBerry Enterprise Server on which the Mobile Data Service will be enabled to the BlackBerry Enterprise Server Management console.! Start the BlackBerry Server service. (This step writes the host name of the BlackBerry Enterprise Server computer to the administration mailbox.) Refer to Postinstallation procedures in the BlackBerry Enterprise Server for Microsoft Exchange 5.5 Installation and Getting Started Guide and the BlackBerry Enterprise Server for Microsoft Exchange 2000 Installation and Getting Started Guide. 40 BlackBerry Enterprise Server Software for Microsoft Exchange

41 Configuring Mobile Data Service properties Configuring Mobile Data Service properties In the BlackBerry Enterprise Server Management console, the Mobile Data Service properties are divided into: General parameters Hypertext Transfer Protocol (HTTP) parameters Online Certificate Status Protocol (OCSP) parameters (required for S/MIME digital signing) TLS (Transport Layer Security) and HTTPS (HyperText Transport Protocol Secure) parameters Lightweight Directory Access Protocol (LDAP) parameters (required for S/MIME digital signing). Push Server parameter (optional) On each tab of the server s Mobile Data Service Properties window, you can set parameters to control how the Mobile Data Service manages intranet data. Warning: You should not change the default port parameters unless there is a port conflict with another service on the same computer. Warning: The Mobile Data Service requires up to two minutes to reflect changes to configuration parameters. The Mobile Data Service reads from the BlackBerry Enterprise Server Management database every two minutes, updates changed values and refreshes the Mobile Data Service with changed values. The following sections describe the property settings. For detailed procedures on how to open the Mobile Data Service Properties window and set properties, refer to Post-installation procedures in your BlackBerry Enterprise Server for Microsoft Exchange 5.5 Installation and Getting Started Guide or BlackBerry Enterprise Server for Microsoft Exchange 2000 Installation and Getting Started Guide. Administration Guide 41

42 Chapter 3: Getting started Mobile Data Service properties and tasks General parameters Any default port values that are not read-only can be changed if you require another value. Warning: You should not change the default port parameters unless there is a port conflict with another service on the same computer. General tab properties Host Name Port Push Server Connection Listen Port Description host name of the local host (on which the BlackBerry Enterprise Server Software is installed) default value based on the BlackBerry Enterprise Server administration mailbox port number value is assigned when the server is added to the BlackBerry Enterprise Server Management console, or you can type the port number in the field by default, BlackBerry Enterprise Server #1 in a site listens on port number 3200 sequential port numbers are available if you install multiple BlackBerry Enterprise Server services in the site; for example, the port numbers for services 2, 3, and 4 are 3201, 3202, and 3203, respectively port number on which the Mobile Data Service push server attempts to listen to open server connections default port number for first server in a site: 8300 sequential port numbers are available if you install multiple BlackBerry Enterprise Server services in the site; for example, the port numbers for services 2, 3, and 4 are 8301, 8302, and 8303, respectively 42 BlackBerry Enterprise Server Software for Microsoft Exchange

43 Configuring Mobile Data Service properties General tab properties Monitor Agent Listen Port Web Server Listen Port Maximum number of kilobytes per connection Flow control timeout (milliseconds) Description port number through which the monitor agent receives requests default port number for first server in a site: 8200 sequential port numbers are available if you install multiple BlackBerry Enterprise Server services in the site; for example, the port numbers for services 2, 3, and 4 are 8201, 8202, and 8203, respectively port number through which the web server receives requests default port number for first server in a site: 8100 sequential port numbers are available if you install multiple BlackBerry Enterprise Server services in the site; for example, the port numbers for services 2, 3, and 4 are 8101, 8102, and 8103, respectively maximum number of kilobytes (KB) that can be sent to the handheld per Mobile Data Service connection default value: 128 KB allowable range of values: 1 to 1024 length of time that the Mobile Data Service enables for the handheld to send an acknowledgement before discarding all content pending to the handheld. default value: 60, 000 milliseconds allowable range of values: 60, 000 to 300, 000 Administration Guide 43

44 Chapter 3: Getting started Mobile Data Service properties and tasks HTTP parameters Any default port values that are not read-only can be changed if you require another value. Warning: You should not change the default port parameters unless there is a port conflict with another service on the same computer. HTTP tab properties Use HTTP Proxy Server Allow the Mobile Data Service to support HTTP Authentication Authentication timeout (milliseconds) Description optional; by default, it is not selected if you select this option, type a Host Name and a Port number in the fields provided for the HTTP Proxy Server allowable range of values: 1 to the HTTP Proxy Server Port number is also used by Sun implementations of HTTP URL connections only form of network authentication support for Mobile Data Service may support Single Domain (Mobile Data Service and web server reside in the same domain) or Cross Domain (Mobile Data Service and web server reside in different domains) network authentication enables authentication information storage enables web server to challenge web client requests enabled by default specifies the length of time before the authentication information becomes invalid default value: 3, 600, 000 milliseconds range of allowable values: 0 to 86, 400, BlackBerry Enterprise Server Software for Microsoft Exchange

45 Configuring Mobile Data Service properties HTTP tab properties Allow the Mobile Data Service to handle HTTP Cookie storage HTTP handheld connection timeout (milliseconds) HTTP server connection timeout (milliseconds) Description enables the Mobile Data Service, instead of the handheld, to manage cookie storage, reducing load on the handheld; if this option is not enabled, the handheld manages HTTP cookie storage enabled by default specifies the length of time that the HTTP connection waits before closing for the handheld to send data. default value: 120, 000 milliseconds range of allowable values: 5, 000 to 120, 000 specifies the length of time that the HTTP connection waits before closing for the server to send data default value: 120, 000 milliseconds range of allowable values: 5, 000 to 120, 000 Administration Guide 45

46 Chapter 3: Getting started Mobile Data Service properties and tasks LDAP parameters Configure LDAP parameters to use S/MIME digital signing. Refer to "Enabling S/MIME encryption at the server level" on page 74 for more information. Any default port values that are not read-only can be changed if you require another value. Warning: You should not change the default port parameters unless there is a port conflict with another service on the same computer. LDAP tab properties Host Name Port Default Server Base Query Query Limit Enable Data Compression Description name of the default LDAP Server; when there is no LDAP server specified in a query URL (LDAP:///), the request is automatically sent to the default server by default, this field is empty port number on which the default LDAP server listens the port value does not default, and it is required if you provided a Host Name allowable range of values: 1 to default base query for the default server; a value must be set, as each LDAP server can host multiple domains, but can only search in one of them at a time by default, this field is empty maximum number of entries that is returned for each base query default value: 20 allowable range of values: 1 to enables compression of the result data stream selected by default 46 BlackBerry Enterprise Server Software for Microsoft Exchange

47 Configuring Mobile Data Service properties TLS and HTTPS parameters Any default port values that are not read-only can be changed if you require another value. Warning: You should not change the default port parameters unless there is a port conflict with another service on the same computer. TLS & HTTPS tab properties Allow outbound connections to untrusted servers over HTTPS Allow outbound connections to untrusted servers over TLS Description select whether you want to enable outbound connections to servers for which no certificate is stored over HTTPS by default, this option is not selected select whether you want to enable outbound connections to servers for which no certificate is stored over TLS by default, this option is not selected Administration Guide 47

48 Chapter 3: Getting started Mobile Data Service properties and tasks OCSP parameters Any default port values that are not read-only can be changed if you require another value. Warning: You should not change the default port parameters unless there is a port conflict with another service on the same computer. OCSP tab properties Use Device Responders Use Certificate Extension Responders Default Responder URL Description selected by default, to enable the OCSP handler to accept OCSP responders specified by the handheld; these are not considered to be secondary responders selected by default, to enable the OCSP handler to use the OCSP responder extension in the certificate (if a certificate is present); this is considered only if the primary responder does not respond specifies an OCSP responder s URL; by default, this field is empty Push Server parameter The Push Server tab appears only for a BlackBerry Enterprise Server that has been enabled as the Mobile Data Service centralized push server. Refer to "Setting Mobile Data Service centralized push server" below for more information. Push Server tab properties Update the -to-PIN mapping every...hour(s) Description by default, set to the Database Consistency value specified during the installation of Mobile Data Service; configures the frequency of the Database Consistency (DBConsistency.exe) utility s automatic update of the -to-PIN mapping. Refer to "Updating -to-PIN mapping" on page 97 for more information on manually updating an -to-PIN mapping. Refer to "BlackBerry Database Consistency Service utility" on page 179 for more information on the Database Consistency utility. 48 BlackBerry Enterprise Server Software for Microsoft Exchange

49 Setting Mobile Data Service centralized push server Setting Mobile Data Service centralized push server This procedure is optional. The centralized push server functionality is part of the Mobile Data Service installation, and can be selected on a single Mobile Data Service. 1. In the BlackBerry Enterprise Server Management console, expand BlackBerry Server Management in the left pane. 2. Expand a site/routing group. 3. Right-click a BlackBerry Enterprise Server object. Click Set as MDS Push Server. The Set as MDS Push Server check box has a check mark beside it on the server s Action menu when it is enabled for that server. Warning: Only one Mobile Data Service in a system can have the centralized push checkbox selected. All other Mobile Data Services must have the Set as MDS Push Server check box cleared for the push functionality to work. Enabling Mobile Data Service The Mobile Data Service must be enabled at the server level and at the user level through BlackBerry Enterprise Server Management before it can be enabled on the user s BlackBerry Wireless Handheld. Warning: Mobile Data Service is automatically enabled when the BlackBerry Enterprise Server service starts. Manually enabling the Mobile Data Service at the server level 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item. Right-click a BlackBerry Server and click Enable Mobile Data Service. The Mobile Data Service is enabled at the server level. You must then enable Mobile Administration Guide 49

50 Chapter 3: Getting started Mobile Data Service properties and tasks Data Service at the user level before users on the server can enable Mobile Data Service on their handhelds. Manually enabling the Mobile Data Service at the user level Mobile Data Service must be enabled at the server level before you can complete the following procedure to enable Mobile Data Service at the user level. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item. Right-click a user and click Enable Mobile Data Service. The Mobile Data Service is enabled for that specific user. This user can then enable Mobile Data Service on the handheld. Tip: You can select multiple users by holding CTRL while clicking user names. You can then right-click and enable Mobile Data Service for all selected users simultaneously. 3. Users must insert their handhelds into their cradles and synchronize them with their desktops. On the RIM 850 Wireless Handheld, RIM 857 Wireless Handheld, RIM 950 Wireless Handheld, and RIM 957 Wireless Handheld, the Browser icon now appears on the handheld if the user chose to install the Browser application using the Application Loader. No further user configuration is required. 4. On the BlackBerry 5800 Series and BlackBerry 6700 Series of wireless handhelds, users must configure their Browser to use the Mobile Data Service, not a Wireless Access Protocol (WAP) gateway. Users must perform the following steps:! On the Browser menu, click Options.! Click Browser Configuration.! In the Choose Browser Config section, select IPPP Browser Config. Refer to "How do I troubleshoot Mobile Data Service problems?" on page 188 for more information if this option is not present. 50 BlackBerry Enterprise Server Software for Microsoft Exchange

51 Chapter 3: Getting started Mobile Data Service properties and tasks Warning: After the Mobile Data Service is enabled at the server level, you must start the BlackBerry Enterprise Server service (or restart it if it has already been started) to enable the changes to take effect before the user (after being enabled for Mobile Data Service) can begin web browsing. 5. To test that the Mobile Data Service is configured correctly, users should open their Browser and go to (the trailing slash mark is required). If the user successfully views this web page, the Mobile Data Service is working. Refer to "How do I troubleshoot Mobile Data Service problems?" on page 188 for more information if the user cannot see the web page. Disabling the Mobile Data Service You can disable the Mobile Data Service at the server level (to disable all user accounts on a server simultaneously) or user level (to disable a single user account at a time) through BlackBerry Enterprise Server Management. The Mobile Data Service is then disabled automatically on the user s BlackBerry Wireless Handheld. Disabling the Mobile Data Service at the server level 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item. Right-click a BlackBerry Server and select Disable Mobile Data Service to disable the Mobile Data Service at the server level. Mobile Data Service will no longer be enabled on the users handhelds. Disabling the Mobile Data Service at the user level 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 51 BlackBerry Enterprise Server Software for Microsoft Exchange

52 Chapter 3: Getting started Mobile Data Service properties and tasks 2. Expand a BlackBerry Server site/routing group item. Right-click a user and click Disable Mobile Data Service. The Mobile Data Service is disabled for that specific user. The Mobile Data Service is no longer enabled on the user s handheld. Tip: To select multiple users by holding CTRL while clicking user names. Right-click and disable Mobile Data Service for all selected users simultaneously. 52 BlackBerry Enterprise Server Software for Microsoft Exchange

53 Chapter 4 Assigning properties across all servers This section provides information on the following topics: Configuring handheld licenses Configuring communication settings Configuring database information Configuring visual settings Configuring BlackBerry Enterprise Server Management logging

54 Chapter 4: Assigning properties across all servers BlackBerry Enterprise Server Management enables the administration of the BlackBerry Enterprise Server Management console through the Action menu items that appear when BlackBerry Management is selected in the Tree view pane, or through the BlackBerry Enterprise Server Management Properties window. Additional tasks that apply to all servers that are added to the BlackBerry Enterprise Server Management console are available through the Action menu items that appear when an active site/routing group is selected in the Tree view pane. Configuring handheld licenses BlackBerry Enterprise Server Management tracks BlackBerry client licenses. When you open and exit the Add Users window, the License Manager informs you when you require more licenses. When you purchase more licenses, use the BlackBerry Enterprise Server Management Properties window s License tab to record the additional number of licenses that you purchased. Adding more licenses by upgrading your license key 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 54 BlackBerry Enterprise Server Software for Microsoft Exchange

55 Configuring communication settings 2. In the left pane, select BlackBerry Server Management. Right-click and click Properties, or select Action > Properties. The BlackBerry Server Management Properties window appears. BlackBerry Server Management window License tab 3. Click the License tab. The license keys that are currently being used, as well as statistics on the number of licenses that are used and available, are listed in this window. 4. To upgrade your license count (add new licenses) type a new license key in the Upgrade Key section, and then click Add Licenses. Note: You receive an error message if the number of users exceeds the number of licenses. Configuring communication settings To change the Communication Settings for the BlackBerry Enterprise Server, use the BlackBerry Enterprise Server Management COM Port tab. The handheld must be inserted in the cradle attached to computer running BlackBerry Enterprise Server Management to complete this procedure. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. Administration Guide 55

56 Chapter 4: Assigning properties across all servers 2. In the left pane, select BlackBerry Server Management. Right-click and click Properties, or select Action > Properties. The BlackBerry Enterprise Server Management Properties window appears. Click the COM Port tab. BlackBerry Server Management Properties window COM Port tab 3. To detect the correct COM Port, insert the handheld into the cradle connected to the BlackBerry Enterprise Server Management computer and click Detect. The correct COM Port is automatically selected from the drop-down list. 4. To change the Maximum Port Speed (measured in bits per second), select a new speed from the drop-down list. 5. When you are finished, click OK. Configuring database information If you installed the database during the BlackBerry Enterprise Server Management installation, the database settings are already configured. You can view and modify or add database settings using the BlackBerry Enterprise Server Management Properties Database tab. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 56 BlackBerry Enterprise Server Software for Microsoft Exchange

57 Configuring visual settings 2. In the left pane, select BlackBerry Server Management. Right-click and click Properties, or select Action > Properties. The BlackBerry Enterprise Server Management Properties window appears. Click the Database tab. BlackBerry Server Management window Database tab 3. You can change the database settings by modifying the values in the Database Server and Database Name fields. The values in these fields should default from the database installation settings. 4. To configure the Database Authentication method, select either the Windows NT Authentication option or the SQL Server Authentication option. If you select SQL Server Authentication, you can modify the SQL User Name and Password fields to control database access. 5. When you are finished, click OK. Note: You must restart BlackBerry Enterprise Server Management (close and reopen the console) for the changes to take effect. Configuring visual settings You can use the BlackBerry Enterprise Server Management Properties Advanced tab to configure advanced visual, Windows domain, and refresh settings on the BlackBerry Enterprise Server. Administration Guide 57

58 Chapter 4: Assigning properties across all servers 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. In the left pane, select BlackBerry Server Management. Right-click and click Properties, or select Action > Properties. 3. The BlackBerry Enterprise Server Management Properties window appears. Select the Advanced tab. BlackBerry Server Management Properties window Advanced tab 4. You can select the following two optional visual settings: Hide empty routing groups in scope pane: Select this check box to remove site/routing groups on which no BlackBerry Enterprise Servers are present from the View pane on the BlackBerry Enterprise Server Management display. Show server status information only for selected servers: Select this check box to check the server status and SRP status only when a server is selected. This is useful to speed up loading. If this option is not selected, server status and SRP status are checked for all servers whenever the site/routing group is expanded. 5. In the Domain to search Exchange Servers field, if you want to connect to a different domain than the one to which you are currently logged in, type the name of the Windows Domain. The value you set in this field is added to the BlackBerry Database Consistency Service (DBConsistency.exe) utility registry settings (the Domain value under the 58 BlackBerry Enterprise Server Software for Microsoft Exchange

59 Configuring BlackBerry Enterprise Server Management logging HKEY_LOCAL_MACHINE/Software/Research In Motion/BlackBerry Enterprise Server/DBConsistency key). You must restart BlackBerry Enterprise Server Management (close and reopen the console) for this change to take effect. 6. In the LDAP Port field, the value defaults to 389. This port is used only in a native Microsoft Exchange 5.5 environment for communicating with the Exchange Directory. Change the port value only if you change the LDAP port in Microsoft Exchange 5.5 Administrator because of a port conflict with Active Directory. For more information, refer to the following pages on Microsoft s support site: Knowledge Base article Q224447: Knowledge Base article Q240078: To specify a length of time after which user lists are automatically refreshed in the BlackBerry Enterprise Server Management display, from the Automatically refresh user list every... drop-down list, select an option. 8. To specify a length of time after which server lists are automatically refreshed in the BlackBerry Enterprise Server Management display, from the Automatically refresh server list... drop-down lists, select an option. 9. When you are finished, click OK. Configuring BlackBerry Enterprise Server Management logging You can use the BlackBerry Enterprise Server Management Properties Logging tab to configure logging settings on the BlackBerry Enterprise Server Management console. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. In the left pane, select BlackBerry Server Management. Right-click and click Properties, or select Action > Properties. Administration Guide 59

60 Chapter 4: Assigning properties across all servers 3. The BlackBerry Enterprise Server Management window appears. Click the Logging tab. BlackBerry Server Management window Logging tab 4. If you want to disable logging on the BlackBerry Enterprise Server Management console, verify that the Disable logging for the Management console option is selected. If you disable logging, no other logging configuration options are available. If you want to enable logging on the BlackBerry Enterprise Server Management console, select the Enable logging for the Management console option. 5. To keep daily log files, select the Keep daily log files check box. Log files are saved (a new file each day) to the location that you specify in the Log filename field. If you do not select this check box, logging occurs as a daily addition to a single log file. 6. To set a size limit on the log files that you create, in the Maximum size of log file field, type a value (in KB) to which the log file size is limited. A value of 0 places no limit on the file size. 7. From the Log messages at level drop-down list, select a level of alert for any log file messages that are generated. 8. In the Log filename field, type the path and file name to which the log files are saved. 60 BlackBerry Enterprise Server Software for Microsoft Exchange

61 Chapter 4: Assigning properties across all servers 9. To place a limit on the length of time that log files are stored, in the Delete daily log files older than field, type a value (in days). 10. When you finish configuring logging options for the BlackBerry Enterprise Server Management console, click OK. Settings are saved and the BlackBerry Enterprise Server Management Properties window closes. Note: You must restart BlackBerry Enterprise Server Management (close and reopen the console) for the changes to take effect. 61 BlackBerry Enterprise Server Software for Microsoft Exchange

62

63 Chapter 5 Administering individual server properties This section provides information on the following topics: Viewing/editing system information Server level global redirection filter tasks Configuring a disclaimer Setting Auto BCC addresses Enabling S/MIME Encryption at the server level Configuring BESAlert notification Configuring BlackBerry Enterprise Server logging

64 Chapter 5: Administering individual server properties BlackBerry Enterprise Server Management enables administration of BlackBerry Enterprise Servers through the Action menu items that appear when a BlackBerry Enterprise Server is selected in the Tree view pane, or through the server s BlackBerry Server Properties window. Additional tasks that apply to all servers are available through the Action menu items that appear when an active site/routing group is selected in the Tree view pane. You can perform user and handheld-oriented administrative functions through each user s Microsoft Exchange mailbox. Viewing/editing system information The System Information is your vital link to the wireless network. You can use only values from the BlackBerry Enterprise Server installation CD label (or imported from the SRP_AUTH.SRP file) as valid System Information. After you add a server, you can modify the server system information at any time. Warning: Changing any of the information in the SRP Identifier, or SRP Authentication, or Host Routing Info fields changes the routing information for all users on the server. If you modify the SRP Identifier, SRP Authentication Key, or Host Routing Info, all users must synchronize their handhelds. The SRP information is unique to your installation; changing this information, or host routing information, will disconnect you from the wireless network. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item. Right-click the server that you want to view/modify, and click BlackBerry Server Properties. The server s BlackBerry Server Properties window appears. The server system information appears on the General tab. In the Administration 64 BlackBerry Enterprise Server Software for Microsoft Exchange

65 Viewing/editing system information Mailbox field, the mailbox that you specified during installation appears, grayed out. BlackBerry Server Properties window General tab Tip: To simplify installations, upgrades, and reinstallations, create an.srp file that contains your SRP identifier and SRP authentication key. You can import this.srp file to automatically add these values to the appropriate fields when required. Keep this file in a secure directory. 3. In the SRP Identifier field, if no value is assigned or you want to change the existing value, type the appropriate information (which is located on the BlackBerry Enterprise Server installation CD label). You can also click Import to retrieve the SRP Identifier from an.srp file if you created one to store your SRP identifier and SRP authentication key. 4. In the SRP Authentication Key field, if no value is assigned or you want to change the existing value, type the appropriate information (which is located on the BlackBerry Enterprise Server installation CD label). 5. If host routing information was also provided on the BlackBerry Enterprise Server installation CD, in the Host Routing Information field, define the information that is necessary to connect to the mobile network. Administration Guide 65

66 Chapter 5: Administering individual server properties Warning: You should only define values in this field if values are provided with the installation material. If you are using the default Network Access Node (the SRP Address value that is provided on your installation CD label), or are uncertain which values to use, leave this field blank. If you define incorrect values in this field, connection to the mobile network is not possible. 6. After you complete all of the necessary fields, click OK. Repeat the procedure for each BlackBerry Enterprise Server that you want to modify. To prevent a loss of service, verify that the SRP identifier and authentication keys are unique for each BlackBerry Enterprise Server. Server level global redirection filter tasks Redirection filters define which messages are redirected to the handheld. Global redirection filters take precedence over the filters that are defined by users on their desktop software. Note: User-defined filters are only used if no global filter rules apply to the same conditions. If you define global filters, you might want to inform users, so that they understand why some of their filter rules might not be applied. Note: Global filter functionality does not appear in BlackBerry Enterprise Server versions that are earlier than 2.1. If you are using BlackBerry Enterprise Server version 2.0 or earlier, you cannot use global filters. Adding global redirection filters at the server level Complete the following procedure to add a global filter that applies to all users on the server. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item, and then right-click a server name and click BlackBerry Server Properties. The server s 66 BlackBerry Enterprise Server Software for Microsoft Exchange

67 Server level global redirection filter tasks BlackBerry Server Properties window appears. Click the Global Filters tab. BlackBerry Server Properties window Global Filters tab 3. Click New. The Add Filter window appears. Add Filter window Administration Guide 67

68 Chapter 5: Administering individual server properties 4. In the Filter Name field, type a name to describe the new filter. 5. Select the check box beside the desired condition(s) and type the filter condition in the corresponding field. Any message that arrives at a user s desktop that meets the condition is subject to this filter. Guidelines for creating filters When you enter values in the From and Sent fields, you must enter either the full SMTP address or the first and last name of the user, in that order, with no commas between the first and last name. If you type multiple keywords in the Body field of a filter, and do not separate keywords with "And" or "Or", the filter uses "Or" when searching. To search for multiple keywords, you must include a semi-colon (;) between the keywords. To hold all messages from multiple users in the Global Address Book, you must separate user names with a semicolon (;), not a comma (,). 6. After you select the criteria for this filter, decide whether the message will be forwarded to the handheld, forwarded with Level 1 notification, forwarded with only the header, or held at the user s computer. Level 1 notification is defined only through this option. Messages with Level 1 filter notification appear with a bold subject line on the recipient s handheld. Handheld users can also set different handheld notification options for Level 1 messages. 7. After you set the conditions and actions, click OK. The new filter appears in the list on the Filters tab. After you define your global filters, you should verify that the filters appear in order from most to least restrictive. To change the order of your filters, select the filter that you want to move and click the up or down arrow buttons. Note: As each message arrives at a user s computer, the first filter rule listed that matches the criteria of that message dictates whether that message will be redirected. Therefore, when you add a filter that is more restrictive than the defaults, verify that it is placed at the TOP of the filter list, so that it is applied first to the incoming messages. 68 BlackBerry Enterprise Server Software for Microsoft Exchange

69 Server level global redirection filter tasks Save Load Other Filters tab options Description select to save filters as a Redirector Filters (.rfi) file select to load filter settings that were previously saved as a Redirector Filters (.rfi) file Modifying global redirection filters 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item, and then right-click a server name. Click BlackBerry Server Properties. The server s BlackBerry Server Properties window appears. BlackBerry Server Properties window Global Filters tab 3. Click the Global Filters tab. From the Name list, select the filter that you want to modify. Administration Guide 69

70 Chapter 5: Administering individual server properties 4. Click Edit. The Edit Filter window appears. Edit Filter window 5. Make any desired changes, and click OK. 70 BlackBerry Enterprise Server Software for Microsoft Exchange

71 Server level global redirection filter tasks Deleting global redirection filters 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item, and then right-click a server name. Click BlackBerry Server Properties. The server s BlackBerry Server Properties window appears. BlackBerry Server Properties window Global Filters tab 3. Click the Global Filters tab. From the Name list, select the filter that you want to delete. 4. Click Delete. The Redirector Settings dialog box appears. Redirector Settings dialog box Confirm delete filter 5. Click Yes to confirm that you want to delete the filter. Administration Guide 71

72 Chapter 5: Administering individual server properties Configuring a disclaimer You can set a disclaimer to add as a signature on all messages that are sent through the BlackBerry Enterprise Server. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item. Right-click the server for which you want to create an automatic disclaimer on all handheld messages, and click BlackBerry Server Properties. The BlackBerry Server Properties window appears. BlackBerry Server Properties window Options tab 3. Click the Options tab. 4. In the Disclaimer Text field, type the text that you want to appear at the end of every message that is sent by handheld users who are assigned to the BlackBerry Enterprise Server. 5. Click OK. The disclaimer text is saved and the BlackBerry Server Properties window closes. 72 BlackBerry Enterprise Server Software for Microsoft Exchange

73 Setting auto BCC addresses Setting auto BCC addresses Set one or more auto blind carbon copy (BCC) addresses to retain a copy of every message that is sent from a handheld user on the BlackBerry Enterprise Server. A blind (concealed from the sender and recipient) carbon copy of each message is sent to the address(es) that you specify. Note: In Microsoft Exchange 2000, if the user that sends the message is on a different Microsoft Exchange Server than the user who is BCC'd, the message that the BCC'd user receives does not indicate that the user was BCC'd. Note: In Microsoft Exchange 5.5, if the user that sends the message is on a different site than the user who is BCC'd, the message that the BCC'd user receives does not indicate that the user was BCC'd. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item. Right-click the server for which you want to set one or more auto BCC addresses, and click BlackBerry Server Properties. The server s BlackBerry Server Properties window appears. BlackBerry Server Properties window Options tab Administration Guide 73

74 Chapter 5: Administering individual server properties 3. Click the Options tab. 4. Click Add Address. The Select Mailbox dialog box appears. Select Mailbox dialog box 5. From the list in the left pane, select one or more addresses to BCC, and then click Select. 6. Click OK. You return to the Properties window. 7. Click OK. The changes are saved and you return to the BlackBerry Server Properties window. Enabling S/MIME encryption at the server level You must enable S/MIME encryption on the server before you can enable S/MIME for the users on the server. Refer to the BlackBerry Wireless Handheld with S/MIME Support User Guide Supplement on the BlackBerry web site ( for more information about S/MIME. Warning: Before users can send and receive S/MIME messages, they must install the BlackBerry Desktop Manager with S/MIME Support and update their handhelds to support S/MIME services. After S/MIME is enabled, they can send and receive encrypted messages, attach a signature to outgoing messages, and perform wireless certificate searches. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 74 BlackBerry Enterprise Server Software for Microsoft Exchange

75 Configuring BESAlert notification 2. Expand a BlackBerry Server site/routing group item. Right-click the server on which you want to enable S/MIME encryption, and click BlackBerry Server Properties. The BlackBerry Server Properties window appears. BlackBerry Server Properties window Options tab 3. Click the Options tab. 4. Verify that the Support S/MIME encrypted messages on this server option is selected; if it is not, select the check box. 5. Click OK. The BlackBerry Server Properties window closes. Configuring BESAlert notification You can configure the BESAlert program to send a copy of events to selected users whenever an Error, Warning, or Information (with event ID 5) event is logged. These alerts can be defined at both server and user levels. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item. Right-click the server on which you want to configure BESAlert parameters, and click Administration Guide 75

76 Chapter 5: Administering individual server properties BlackBerry Server Properties. The BlackBerry Server Properties window appears. BlackBerry Server Properties window BESAlert tab Warning: If the options on the BESAlert tab are grayed-out and unavailable, you do not have sufficient BlackBerry Enterprise Server Management permissions to read the registry keys on the computer that is running the BlackBerry Enterprise Server service. Refer to the BlackBerry Enterprise Server for Microsoft Exchange Installation and Getting Started Guide for full permissions requirements. 3. Click the BESAlert tab. 4. In the Messages Sent From field, type the full SMTP address from which the BESAlert messages will be sent. 5. In the SMTP Server Machine field, type the name of the computer on which the SMTP server is running. Each significant event that is logged and sent to administrators can be sent to multiple destinations. The User Notification list displays the destinations/users who will receive these event reports. 6. If your SMTP server requires it, in the SMTP Helo Login Name field, type the SMTP HELO login name. 7. From the Default Notification Level list, select the message level that generates notification. You can select one of the following options: 76 BlackBerry Enterprise Server Software for Microsoft Exchange

77 Configuring BESAlert notification Error: Notify the user of all error level messages. Warning: Notify the user of all warning and error level messages. Informational: Notify the user of all warning, error, and informational level messages. The levels in this list display from the most to least severe. If you select one of the lower severity options, the user receives all messages at that severity level and higher. 8. After you define the default notification settings, click Apply. After you configure BESAlert notification, you can define users to receive notifications. These users display in the User Notification list and receive the defined event messages as they are logged 9. To add users to the BESAlert User Notification list, click Add. The User Configuration dialog box appears. User Configuration dialog box BESAlert notification 10. In the Name field, type the user or computer name (a basic alias is sufficient) as you want it to appear in the User Notification list. Each destination in the list can have an associated address, a popup console specification, or both. 11. In the address field, type the destination address to be used when sending notifications to this user. 12. In the Console name field, type the name of the computer on which the popup message is to be displayed. 13. From the Notification Level list, select the message level that generates notification. You can select one of the following options: Default: Use the notification level defined for all notification users on the server. Administration Guide 77

78 Chapter 5: Administering individual server properties Error: Notify the user of all error level messages. Warning: Notify the user of all warning and error level messages. Informational: Notify the user of all warning, error, and information level messages. The levels in this list display from most to least severe. If you select one of the lower severity options, users receive all messages at that severity level and higher. 14. After you configure the user for notification, click OK. The user appears in the User Notification list on the BESAlert tab. You can continue to add users by repeating the above procedure, or you can select a user and click Edit to edit the user s notification options. To remove a user from the notification list, select the user, and then click Delete. The user is removed. 15. Click OK. Your changes are saved and the BlackBerry Server Properties window closes. Configuring BlackBerry Enterprise Server logging You can disable or enable the BlackBerry Enterprise Server to log event messages, and configure logging options. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item. Right-click the server that you want to view/modify, and click BlackBerry Server Properties. 78 BlackBerry Enterprise Server Software for Microsoft Exchange

79 Configuring BlackBerry Enterprise Server logging 3. The BlackBerry Server Properties window appears. BlackBerry Server Properties window Logging tab Warning: If the options on the Logging tab are grayed-out and unavailable, you do not have sufficient BlackBerry Enterprise Server Management permissions to read the registry keys on the computer that is running the BlackBerry Enterprise Server service. Refer to the BlackBerry Enterprise Server for Microsoft Exchange Installation and Getting Started Guide for full permissions requirements. 4. Click the Logging tab. 5. If you want to disable logging on the BlackBerry Enterprise Server, verify that the Disable logging for BlackBerry server option is selected. If you disable logging, no other logging configuration options are available. If you want to enable logging on the BlackBerry Enterprise Server Management console, select Enable logging for BlackBerry server. 6. To keep daily log files, select the Keep daily log files check box. Log files are saved (as a new file each day) to the location that you specify in the Log filename field. If you do not select this option, logging occurs as a daily addition to a single log file. 7. To set a size limit on the log files that you create, in the Maximum size of log file field, type a value (in KB) to which the log file size is limited. A value of 0 places no limit on the file size. Administration Guide 79

80 Chapter 5: Administering individual server properties 8. From the Log messages at level drop-down list, select a level of alert for any log file messages that are generated. 9. In the Log filename field, type the path and filename to which the log files are saved. 10. To place a limit on the length of time that log files are stored, type a value (in days) in the Delete daily log files older than field. 11. After you configure logging options for the BlackBerry Enterprise Server, click OK. The settings are saved and the BlackBerry Server Properties window closes. Note: You might be prompted to restart the BlackBerry Enterprise Server for changes to take effect. If this occurs, restart the BlackBerry Enterprise Server. 80 BlackBerry Enterprise Server Software for Microsoft Exchange

81 Chapter 6 Administering individual user properties This section provides information on the following topics: Viewing user properties Performing user level filter tasks Enabling S/MIME encrypted messages for user Generating encryption keys Understanding IT Admin properties

82 Chapter 6: Administering individual user properties When a BlackBerry Enterprise Server icon is selected in the BlackBerry Enterprise Server Management interface, all users that are assigned to that server are listed in the right pane of the window. Viewing user properties 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item. Select a server name. 3. From the User Name list, double-click a user name. The user s Properties window appears. User s Properties window General tab 82 BlackBerry Enterprise Server Software for Microsoft Exchange

83 Viewing user properties Status General tab properties Refresh Status Description This field indicates the general status of redirection for the user. The following statuses are possible: Initializing Running Not configured please run BlackBerry Desktop Manager Redirection disabled Configuration corrupt please run DBClean Verifying forwarding address Invalid forwarding address No PIN No desktop address In cradle redirection to handheld disabled select to view the most recent status Redirection tab properties address Override address Redirect incoming message to user s handheld Disable redirection to handheld while in cradle Don t save outgoing messages from handheld in Sent Items Description displays user s address; a read-only field select to override read-only address; enables you to edit address select to enable redirection select to disable redirection while the handheld is in the docking/charging cradle select to prevent messages that are sent from the handheld from being stored in the handheld Sent Items folder Administration Guide 83

84 Chapter 6: Administering individual user properties Redirection tab properties Inbox only Selected folders Auto Signature Description select to redirect only messages that arrive in the handheld s Inbox select to redirect only messages that arrive in selected folders on the Desktop; click Choose Folders to select one or more redirection folders Only folders that the user has defined on the handheld are available to be selected. type a message to appear at the end of all messages that are sent from the handheld (optional) Performing user level filter tasks Redirection filters define which messages are redirected to the handheld. Global redirection filters take precedence over the filters that are defined by users in their desktop software. Note: User-defined filters are only used if no global filter rules apply to the same conditions. If you define global filters, you might want to inform users, so that they understand why some of their filter rules might not be applied. Adding filters at the user level You can add a filter that applies to a specific user. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item, select a server name, and then right-click a user name. 84 BlackBerry Enterprise Server Software for Microsoft Exchange

85 Performing user level filter tasks 3. Click Properties. The user s Properties window appears. 4. Click the Filters tab. User s Properties window Filters tab 5. Click New. The Add Filter window appears. Add Filter window 6. In the Filter Name field, type a name to describe the new filter. Administration Guide 85

86 Chapter 6: Administering individual user properties 7. Select the check box beside the desired condition(s) and type the filter condition in the corresponding field. Any message that arrives at a user s desktop that meets the condition is subject to this filter. Guidelines for creating filters When you enter values in the From and Sent fields, you must type either the full SMTP address or the first and last name of the user, in that order, with no commas (,) between the first and last name. If you type multiple keywords in the Body field of a filter, and do not separate keywords with And or Or, the filter uses Or when searching. To search for multiple keywords, you must include a semi-colon (;) between the keywords. To hold all messages from multiple users in the Global Address Book, you must separate user names with a semicolon (;), not a comma (,). 8. After you select the criteria for this filter, decide whether the message will be forwarded to the handheld, forwarded with Level 1 notification, forwarded with only the header, or held at the user s computer. Level 1 notification is defined only through this option. Messages with Level 1 filter notification appear with a bold subject line on the recipient s handheld. Handheld users can also set different handheld notification options for Level 1 messages. 9. After you set the conditions and actions, click OK. The new filter appears in the list on the Filters tab. After you define more than one user level filter, you should verify that the filters appear from most to least restrictive. To change the order of your filters, select the filter you want to move and click the up or down arrow buttons. Note: As each message arrives at a user s computer, the first filter rule listed that matches the criteria of that message dictates whether that message is redirected. Therefore, when you add a filter that is more restrictive than the defaults, verify that it is placed at the TOP of the filter list, so that it is applied first to the incoming messages. 86 BlackBerry Enterprise Server Software for Microsoft Exchange

87 Performing user level filter tasks Other Filters tab options Forward messages to the handheld Don t forward messages to the handheld Save Load Description select to specify that when a message does not meet any filter requirements, messages are forwarded to the handheld select to specify that when a message does not meet any filter requirements, messages are not forwarded to the handheld select to save filters as a Redirector Filters (.rfi) file select to load filter settings that were previously saved as a Redirector Filters (.rfi) file Modifying user level redirection filters You can modify a filter that applies to a specific user (which the user might have created at the desktop level). 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item, select a server name, and then right-click a user name. Administration Guide 87

88 Chapter 6: Administering individual user properties 3. Click Properties. The user s Properties window appears. User s Properties window Filters tab 4. Click the Filters tab. 5. From the Name list, select the filter that you want to modify. 6. Click Edit. The Edit Filter window appears. Edit Filter window 88 BlackBerry Enterprise Server Software for Microsoft Exchange

89 Performing user level filter tasks 7. Edit the filter information. 8. After you are finished, click OK. Deleting user level redirection filters You can delete a filter that applies to a specific user. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item, select a server name, and then right-click a user name. Click Properties. The user s Properties window appears. User s Properties window Filters tab 3. Click the Filters tab. 4. From the Name list, select the filter that you want to delete. Administration Guide 89

90 Chapter 6: Administering individual user properties 5. Click Delete. The Redirector Settings dialog box appears. Redirector Settings dialog box Confirm delete filter 6. Click Yes to confirm that you want to delete the filter. Enabling S/MIME encrypted messages for user S/MIME encryption must be enabled on the server before it can be enabled for the users on the server. Refer to "Enabling S/MIME encryption at the server level" on page 74 for more information. Refer to the BlackBerry Wireless Handheld with S/MIME Support User Guide Supplement on the BlackBerry web site ( for more information about S/MIME. Warning: Before users can send and receive S/MIME messages, they must install the BlackBerry Desktop Software with S/MIME Support and update their handhelds to support S/MIME services. After S/MIME is enabled, they can send and receive encrypted messages, attach a signature to outgoing messages, and perform wireless certificate searches. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 90 BlackBerry Enterprise Server Software for Microsoft Exchange

91 Generating encryption keys 2. Expand a BlackBerry Server site/routing group item. Right-click the user for whom you want to enable S/MIME encryption, and click Properties. The user s Properties window appears. User s Properties window Security tab 3. Select the Security tab. 4. Verify that the Support S/MIME encrypted messages option is selected; if it is not, select the check box. Note: The Support S/MIME encrypted messages option is unavailable for selection if the server is not enabled for S/MIME. 5. After you are finished, click OK. The Properties window closes. Generating encryption keys In the BlackBerry encryption model for the BlackBerry Enterprise Server for Microsoft Exchange, only the handheld and the user s mailbox store the encryption key. The encryption key can be generated by the user at the desktop. If the user does not have access to the BlackBerry Desktop Software, you can generate a key at the server level. To generate an encryption key, you must have a serial connection between the BlackBerry Enterprise Server administration computer and the handheld (using the cradle). Administration Guide 91

92 Chapter 6: Administering individual user properties 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item. 3. Select a server name. 4. From the User Name list, double-click a user name. The user s Properties window appears. User s Properties window Security tab 5. Click the Security tab 6. Insert the user s handheld into the cradle and connect the cradle to the BlackBerry Enterprise Server Management computer s serial port. 7. Click Generate. The application prompts you to move your cursor around the screen to generate a new encryption key for this user. 92 BlackBerry Enterprise Server Software for Microsoft Exchange

93 Chapter 6: Administering individual user properties Understanding IT Admin properties The user s IT Admin tab presents information about the IT policy applying to the user. 1. Right-click a user and click Properties. The user's Properties window appears. 2. Select the IT Admin tab to view the following properties. IT Admin tab properties Policy name Status Time sent Time received Resend policy View policy Resend Key Refresh status Description name of the IT policy to which the user is assigned status of the IT policy s reception by the handheld time that the IT policy was last sent to the handheld time that the IT policy was received by the handheld select to resend IT policy data to the handheld select to view the IT policy settings select to resend the Peer-to-Peer (also called PIN-to-PIN) key to the handheld. Refer to "Updating peer-to-peer encryption key" on page 98 for more information. select to refresh the IT policy status with the most recent result Information on any IT Admin commands that have been sent recently appears in the read-only field at the bottom of the IT Admin tab. 93 BlackBerry Enterprise Server Software for Microsoft Exchange

94 Chapter 6: Administering individual user properties 94 BlackBerry Enterprise Server Software for Microsoft Exchange

95 Chapter 7 Performing server maintenance tasks This section provides information on the following topics: Viewing server statistics Refreshing the database Updating -to-PIN mapping Updating peer-to-peer encryption key Reloading users Monitoring redirection Clearing user statistics Changing a user s handheld Moving a user Removing users Removing a server Stopping a server Clearing In-cradle status Purging pending messages Importing system information Exporting user information Sending a message Sending an All Points Bulletin

96 Chapter 7: Performing server maintenance tasks Viewing server statistics You can view the combined statistics of all handhelds that have been added to a particular BlackBerry Enterprise Server. The statistics that are retrieved are static and include the total number of messages and calendar items: forwarded to all handhelds sent from all handhelds pending to all handhelds filtered through all handhelds expired for all handhelds To view global statistics 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item. Right-click a server name. 3. Select Server Stats. The Global Stats for Servername window appears and displays the statistics for all handhelds on that server. Global Stats for Servername window 4. Click Clear Server Stats to set all values to BlackBerry Enterprise Server Software for Microsoft Exchange

97 Refreshing the database Note: Clicking Clear Server Stats does not clear the individual statistics for users on this BlackBerry Enterprise Server. The pending count is not cleared because the messages in the pending queue are not removed from the queue. To delete the messages that are pending to a particular handheld, in the User Stats window, you must click Purge Pending. Refreshing the database The Refresh option resynchronizes the server database (which contains all information about users on the BlackBerry Enterprise Server) in case changes from other computers have occurred in the server database. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Right-click a BlackBerry Server site/routing group item. Click Refresh. Updating -to-PIN mapping If a handheld user makes changes at the desktop level that affect -to-PIN mapping (such as switching the handhelds, which results in a new PIN), you can update the -to-pin-to-server mappings that are stored in the BlackBerry Enterprise Server Management database manually. Note: -to-PIN-mapping is necessary for Mobile Data Service to work properly. If you do not force an -to-pin mapping update, by default changes are detected by the Mobile Data Service database consistency utility every 24 hours, or at another frequency if the default value is changed on the Mobile Data Service Properties Push Server tab. Refer to "Push Server parameter" on page 48 for more information. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. In the Tree view, right-click BlackBerry Server Management. Click Update -to-PIN mapping. A message appears stating that the /PIN/BlackBerry Enterprise Server mapping is being updated in the database. This silent process might require several minutes to complete. Administration Guide 97

98 Chapter 7: Performing server maintenance tasks Updating peer-to-peer encryption key Note: This procedure is optional. It enables you to enforce an internal PIN-to-PIN messages only rule within your organization, preventing users from sending PIN-to-PIN messages to external addresses. External messages can still be received by users. A peer-to-peer (also known as PIN-to-PIN) encryption key can be assigned to all handhelds on all BlackBerry Enterprise Servers that are added to BlackBerry Enterprise Server Management, to encrypt and decode PIN-to-PIN messages. You can update the encryption key, but any handhelds that are turned off or out of a wireless coverage area when you make this change are unable to receive PIN-to-PIN messages until they reconnect with the wireless network. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. In the Tree view, right-click BlackBerry Server Management. Click Update Peer-to-Peer Encryption Key. A warning dialog box appears. BlackBerry Enterprise Server Management warning dialog box 3. Select one of the following options: Current key is not compromised: This option is selected by default. Leave this option selected to generate a new key that is sent to the handheld. The current encryption key is retained on the handheld for up to 7 days to decrypt messages from handhelds that do not yet have the new key. Current key is compromised: Select this option to generate two new keys (the current key and a new key) that are sent to the handheld; this is necessary only if the current key is known to be compromised by handhelds that are not updated automatically. Because not all handhelds receive the new encryption key simultaneously, a period 98 BlackBerry Enterprise Server Software for Microsoft Exchange

99 Reloading users Reloading users exists during which users with new keys and users that do not yet have the new key cannot exchange peer-to-peer messages, if you do not select this option. 4. If you want to update the encryption key now, click Yes. If you move or change the display name of a mailbox, you must update the BlackBerry Enterprise Server to reflect this change. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item. 3. Select a server name. 4. Right-click the user whose mailbox has changed. 5. Click Reload User. The BlackBerry Enterprise Server updates. Note: The BlackBerry Enterprise Server detects a mailbox move automatically within 15 minutes, and reloads the user s information. If you move a hidden mailbox (one that does not appear in the Global Address List), the BlackBerry Enterprise Server does not detect the move. You must reload the user manually (as shown above) to update the mailbox information. Monitoring redirection BlackBerry Enterprise Server Management features real-time reporting of each user s message flow from server to handheld. The information in the fields in the Statistics and Events panes enables you to view the various stages of redirection. The server name appears in the Status field, in parentheses. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item. 3. Select a server name. Administration Guide 99

100 Chapter 7: Performing server maintenance tasks 4. Right-click a user name and click User Stats. The user s BlackBerry Handheld Statistics window appears. BlackBerry Handheld Statistics window Each user s BlackBerry Handheld Statistics window displays numbers, dates, and times that indicate the stage and status of redirection for that user. Note: If the user has wireless calendar synchronization enabled, message-related totals include wireless calendar synchronization requests. The same status information is available in the BlackBerry Enterprise Server Management console result pane columns, where users are listed. However, you might notice a delay, ranging from a few seconds to a maximum of 10 minutes, while the user statistics update in the BlackBerry Enterprise Server Management console result pane. Therefore, the user s BlackBerry Handheld Statistics window might display different, more recent statistics than the console. The delay occurs because the BlackBerry Handheld Statistics window updates immediately based on the user s mailbox, while the BlackBerry Enterprise Server Management console updates based on the BlackBerry Enterprise Server administration mailbox, with less immediate results. 100 BlackBerry Enterprise Server Software for Microsoft Exchange

101 Monitoring redirection The following table explains the type of information that is displayed in each field. Field PIN Status Forwarded Sent from handheld Pending to handheld Description This field lists the handheld s personal identification number. This field indicates the general status of redirection for that user. The following statuses are possible: Initializing Running Not configured please run BlackBerry Desktop Manager Redirection disabled Configuration corrupt please run DBClean Verifying forwarding address Invalid forwarding address No PIN No desktop address In cradle redirection to handheld disabled This field indicates the number of messages that have been forwarded from the computer to the handheld. The number updates automatically when new messages are forwarded. The messages that are forwarded depend on the filters that are set by each user at the desktop and the global filters that can be set at the server level by an administrator. This field indicates the number of messages that are sent from the handheld. This number updates automatically as new messages are sent. This field indicates the number of messages being held until the handheld is turned on or returns to coverage. When the handheld is active again, the messages are sent. Administration Guide 101

102 Chapter 7: Performing server maintenance tasks Expired Filtered Field Time the last message was received by the handheld Time the last message was sent by the handheld Time since last handheld contact Result of last transaction to the handheld Description This field indicates the number of messages that could not be forwarded to the handheld within seven days. Messages only expire if the handheld is turned off or out of a wireless coverage area for more than seven days. The messages still appear in the user s desktop Inbox. This field indicates the number of messages that were not sent to the handheld because the user set filters to hold the messages at the desktop or an administrator set global filters at the server level. This field indicates the last time that the handheld received a message. This field indicates the last time that a message was sent from the handheld. This field indicates the length of time that has passed since the BlackBerry Enterprise Server forwarded a message to or received a message from the handheld. This field indicates the result of the last transaction with the handheld. There are six possible messages in this field: Delivered to handheld Message expired at network Failed forwarding message Illegal handheld PIN Handheld unregistered Refused by handheld Clearing user statistics You can clear the user statistics found in the BlackBerry Handheld Statistics window to reset the value in each field. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item. 102 BlackBerry Enterprise Server Software for Microsoft Exchange

103 Changing a user s handheld 3. Select a server name. 4. Right-click a user name and click User Stats. The user s BlackBerry Handheld Statistics window appears. BlackBerry Handheld Statistics window 5. Click Clear Stats. The user statistics are cleared. Changing a user s handheld If a user receives a different handheld, you must register the new PIN for redirection. If the user does not have access to the BlackBerry Desktop Software, you can register the new handheld using BlackBerry Enterprise Server Management. Note: If users want wireless calendar synchronization enabled, they must enable it from their BlackBerry Desktop Software. Refer to the BlackBerry Wireless Handheld User Guide for further information. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item. 3. Select a server name. 4. From the User Name list, double-click a user name. The user s Properties window appears. 5. Insert the new handheld into the cradle and connect it to the computer that is running the BlackBerry Enterprise Server Management console. Administration Guide 103

104 Chapter 7: Performing server maintenance tasks Moving a user When the application detects the handheld, it prompts you to confirm that you want to assign the new PIN to this user. 6. Click Yes. The application prompts you to generate a new encryption key by moving the mouse. You can move a user from one BlackBerry Enterprise Server to another by using the procedure below, or by dragging and dropping users from one server to another. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item. 3. Select a server name. 4. From the User Name list, right-click a user name and click Move User. The Move Handheld to another server dialog box appears. Removing users Move handheld to another server dialog box 5. From the drop-down list, select a new BlackBerry Enterprise Server. 6. After you are finished, click OK. The user is moved to the BlackBerry Enterprise Server that you selected. The user must reinsert his/her handheld into the cradle for the change to take effect. You can remove a user from a BlackBerry Enterprise Server. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 104 BlackBerry Enterprise Server Software for Microsoft Exchange

105 Removing a server 2. Expand a BlackBerry Server site/routing group item. 3. Select a server name. Removing a server 4. From the User Name list, right-click a user name and select Remove User. You are prompted to choose whether to remove the user from the server. 5. Select Yes, a dialog box appears asking if you want to remove BlackBerry information from the user s mailbox. If you click Yes, the user s handheld is removed from the server, and the handheld s information is deleted from the user s Microsoft Exchange mailbox. If you select No, the user is removed only from the server. You can remove a BlackBerry Enterprise Server from the BlackBerry Enterprise Server Management console. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item. 3. Right-click the name of the server that you want to remove. 4. Click Remove Server. A BlackBerry Enterprise Server Management dialog box appears. Stopping a server BlackBerry Enterprise Server Management dialog box Confirm remove server 5. Click Yes to confirm that you want to remove the server. All users on the server become BlackBerry Desktop Redirector users. You can manually stop a BlackBerry Enterprise Server from running. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. Administration Guide 105

106 Chapter 7: Performing server maintenance tasks 2. Expand a BlackBerry Server site/routing group item. Right-click a BlackBerry Server and select Stop Server. A dialog box appears. Dialog box Confirm stop server 3. Click Yes to confirm that you want to stop the server. When the BlackBerry Service stops, the server icon turns red. Clearing In-cradle status By default, is not redirected to the handheld when it is in the cradle. An interruption in network communications might prevent the BlackBerry Desktop Software from clearing In-cradle status after the handheld is removed from the cradle. If this happens, messages are not forwarded to the handheld, even if it is not in the cradle. Note: The In-cradle flag is ignored by wireless calendar synchronization. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item. 3. Select a server name. 106 BlackBerry Enterprise Server Software for Microsoft Exchange

107 Purging pending messages 4. Right-click a user name and click User Stats. The user s BlackBerry Handheld Statistics window appears. BlackBerry Handheld Statistics window 5. Click Clear-In-Cradle. The In-cradle flag is removed and redirection resumes. Note: if it does not detect the BlackBerry Desktop Software is in use, the BlackBerry Enterprise Server removes the In-cradle status automatically within 10 minutes. Purging pending messages Some situations might occur in which it is necessary for you to purge messages that are pending to a handheld. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item. 3. Select a server name. Administration Guide 107

108 Chapter 7: Performing server maintenance tasks 4. Right-click a user name and click User Stats. The user s BlackBerry Handheld Statistics window appears. BlackBerry Handheld Statistics window 5. Click Purge Pending. All messages that are waiting to be sent to that handheld are not forwarded. They still appear in the user s desktop Inbox. Note: If the user has wireless calendar synchronization enabled, calendar messages are also purged. However, those messages are resent later. Pending IT policies or IT Admin commands are not purged. Importing system information You can import server information (for example, server name, administrator mailbox, and so on) to BlackBerry Enterprise Server Management. Warning: If you upgraded from using the Microsoft Exchange 5.5 administration extensions to using BlackBerry Enterprise Server Management, you should have exported your server information from the administration extensions and then removed the administration extensions before you installed the BlackBerry Enterprise Server version 3.5. You must import the server information you exported from the Microsoft Exchange 5.5 administration extensions before you installed the BlackBerry Enterprise Server version 3.5. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 1. In the Tree view, right-click BlackBerry Server Management and click Import. A directory dialog box appears. 2. Browse to the directory location of the system information text file and click Open. The Import BlackBerry Server dialog box appears. 108 BlackBerry Enterprise Server Software for Microsoft Exchange

109 Exporting user information 3. Review the information that is imported. 4. After you are finished, click OK. Exporting user information You can export certain user information into a tab-delimited text file. The basic statistics that are displayed are static and include mailbox name, PIN, and enable state. When you export user statistics, you are given the option to include usage statistics (such as the number of messages forwarded, sent, pending, filtered, and expired) in the text file. The export procedure is used under the following circumstances: If you are upgrading from using the Microsoft Exchange 5.5 administration extensions to using the BlackBerry Enterprise Server Management tool If you are moving BlackBerry Enterprise Servers from one database to another Note: Refer to the BlackBerry Enterprise Server for Microsoft Exchange 5.5 Installation and Getting Started Guide for more information on exporting server information in Microsoft Exchange 5.5 Administrator. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item. 3. Select a server name. 4. Select the user, or multiple users, for which you want to export information. 5. Right-click and click Export User Info. A dialog box appears, showing the estimated amount of time before a full export is complete. 6. Click Yes if you want to export all user statistics including usage statistics. Click No if you only want to export the basic statistics. A Save dialog box appears. 7. Define the path and desired file name. 8. Click Save. By default, the file is saved with a.txt file name extension. Administration Guide 109

110 Chapter 7: Performing server maintenance tasks Sending a message If you want to send an message to any handheld user on a BlackBerry Enterprise Server, in the view pane of BlackBerry Enterprise Server Management, right-click a user and select Send Message. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item. 3. Select a server name. 4. From the User Name list, right-click a user name and select Send Message. The Send Message window appears. Send Message window 5. Type the Subject and Body of your message, and click Send. The message arrives at the recipient s Inbox and proceeds to that person s handheld. The sender s name appears as the mailbox name that is used for BlackBerry Enterprise Server Management administration. Tip: You can send an All Points Bulletin to all users on a BlackBerry Enterprise Server. Refer to Sending an All Points Bulletin on page 111 for more information on sending an All Points Bulletin. 110 BlackBerry Enterprise Server Software for Microsoft Exchange

111 Chapter 7: Performing server maintenance tasks Sending an All Points Bulletin Use the All Points Bulletin (APB) feature to send an message to all or selected handheld users (either all those on a specific server or on all BlackBerry Enterprise Servers). Note: APBs that are sent directly to handhelds are not encrypted before they are sent. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Right-click a BlackBerry Server site/routing group name. 3. Click Send APB. The Send All Points Bulletin window appears. Send All Points Bulletin window 4. In the Select Server(s) section, select whether you want to send the message to All Servers or users on Selected Servers Only. All Servers is selected by default. If you select Selected Servers Only, specify the desired server(s) from the list. (Hold CTRL while selecting to select multiple servers.) 111 BlackBerry Enterprise Server Software for Microsoft Exchange

112 Chapter 7: Performing server maintenance tasks 5. In the Select the Send Method section, specify how you want to send the APB: Method Via Direct to All Handhelds Direct to Selected Handhelds Description Send the message through the users Microsoft Exchange mailbox. Send the message to all users by PIN. Send the message to the selected users by PIN. If you chose Selected PINs Only, select the desired PINs from the list. Note: PIN-based APB functionality does not appear in BlackBerry Enterprise Server versions that are earlier than version 2.1. If you are using BlackBerry Enterprise Server version 2.0 or earlier, you cannot send a PIN-based APB. 6. Type the Subject and Body of your message. 7. Click Send. The message is sent to the server users that you specified. The message sender appears as System Administrator. Tip: To send a message to an individual handheld user, right-click the user name and click Send. 112 BlackBerry Enterprise Server Software for Microsoft Exchange

113 Chapter 8 Managing IT Policy This section provides information on the following topics: IT administration tasks Configuring IT policy settings Editing a policy userlist

114 Chapter 8: Managing IT Policy IT administration tasks Warning: Server and user level IT policy menu items are hidden for servers that do not yet support IT policy. To determine the version of the server that is installed, when the BlackBerry Enterprise Server service is first started, the version is recorded in the administration service account mailbox. If the BlackBerry Enterprise Server has never been started (or if it is an earlier BlackBerry Enterprise Server version than 3.5), and then no version is recorded, and IT policy items appear to be unsupported and are not available. The solution is to start the BlackBerry Enterprise Server service after installation. You can perform IT administration tasks on handhelds using BlackBerry Enterprise Server Management. These tasks include the following commands: Set Password and Lock: resets the handheld to display the password prompt screen and create a new password Set Owner Info: sets the owner information that is stored on the handheld Kill Handheld: disables the handheld and deletes all information stored on the handheld Resending the Peer-to-Peer encryption key: resends the Peer-to-Peer encryption key after it has been updated Setting a handheld password and locking the handheld You can set a new handheld password, which replaces any existing password on the handheld. This action simultaneously locks the handheld and prompts the user for the new password. If a password already exists on the user s handheld, the user is prompted to accept the password that you set. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item, and then select a server name. The users who are assigned to the server are listed in the right pane. 3. Right-click a user and select IT Admin > Set Password and Lock. 114 BlackBerry Enterprise Server Software for Microsoft Exchange

115 Chapter 8: Managing IT Policy 4. The Set Handheld Password and Lock dialog box appears. Set Handheld Password and Lock dialog box 5. In the New Password and New password again fields, type the password you want to set on the handheld. The password should be 4 to 15 characters in length. Warning: Do not use special characters when you create the password; the BlackBerry handheld cannot accept special characters. The user is unable to type a password with special characters on the BlackBerry handheld. 6. If desired, select the Set owner information as well option. If you select the check box, type owner information in the fields that are available. 7. Click OK. The dialog box closes and the password is set. Setting owner information You can set the owner information that is stored on the handheld. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item, and then select a server name. The users who are assigned to the server are listed in the right pane. 115 BlackBerry Enterprise Server Software for Microsoft Exchange

116 Chapter 8: Managing IT Policy 3. Right-click a user. Select IT Admin > Set Owner Info. The Set Handheld Owner Information dialog box appears. Set Handheld Owner Information dialog box 4. Type appropriate owner information in the fields available. 5. Click OK. The window closes and the owner information is set. Disabling a handheld You can permanently disable the use of a handheld. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item, and then select a server name. The users who are assigned to the server are listed in the right pane. 3. Right-click a user. Select IT Admin > Kill Handheld. A warning dialog box appears. Warning dialog box Confirm disable handheld 4. Click Yes. The handheld is disabled and all information that is stored on the handheld is deleted. If you do not want to permanently disable the handheld and delete all of its stored information, click No. 116 BlackBerry Enterprise Server Software for Microsoft Exchange

117 Chapter 8: Managing IT Policy Resending the Peer-to-Peer encryption key A Peer-to-Peer (also known as PIN-to-PIN) encryption key might be assigned to all handhelds on all BlackBerry Enterprise Servers that are added to BlackBerry Enterprise Server Management, to encrypt and decode PIN-to-PIN messages. Resending the Peer-to-Peer encryption key is an optional procedure. If you right-click a user and select IT Admin and this command is grayed-out, it means that you have never used the Update Peer-to-Peer Encryption key command before. (Refer to "Updating peer-to-peer encryption key" on page 98 for more information.) If you updated a Peer-to-Peer encryption key, you have the option of resending the Peer-to-Peer encryption key to the user s handheld. You might want to do this because any handhelds that were turned off or out of a wireless coverage area when the Peer-to-Peer encryption key was updated are unable to receive PIN-to-PIN messages until they reconnect with the wireless network. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item, and then select a server name. The users who are assigned to the server are listed in the right pane. 3. Right-click a user. Select IT Admin > Resend Peer-to-Peer Encryption Key. The updated key is resent to the handheld. 117 BlackBerry Enterprise Server Software for Microsoft Exchange

118 Chapter 8: Managing IT Policy Configuring IT policy settings The wireless IT policy synchronization feature of BlackBerry Enterprise Server Management enables you to configure desktop manager settings and handheld settings on a server-by-server basis. Users can be added to a policy and can be grouped by policy. You can edit existing policies by adding IT policy items (settings) to and removing IT policy items from the policy item, and create and edit policy userlists within BlackBerry Enterprise Server Management. Note: Policy settings are synchronized and updated over the wireless network. Wireless synchronization of IT policy is not supported with BlackBerry Desktop Software versions earlier than 3.5. Adding an IT policy The Default policy is applied automatically to all users on the BlackBerry Enterprise Server after installation. You can create one or more new policies and add users to the new policies. When you add a user to a new policy, you automatically remove the user from the original policy. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 118 BlackBerry Enterprise Server Software for Microsoft Exchange

119 Chapter 8: Managing IT Policy 2. Expand a BlackBerry Server site/routing group item. Right-click a BlackBerry Server and click IT Policy. The IT Policy settings for BlackBerry Server window appears. IT Policy settings for BlackBerry Server window 3. To add a new IT policy to the BlackBerry Enterprise Server, click New Policy. The New IT Policy window appears. New IT Policy window 4. In the Policy Name field, type a name for your new IT policy. To create the policy, add and configure policy keys from the list in the New IT Policy window. 119 BlackBerry Enterprise Server Software for Microsoft Exchange

120 Chapter 8: Managing IT Policy 5. To add a policy item to the policy, click the check box beside its name in the New IT Policy dialog box. From this list of default policy items (and third-party policy items if you added any), you can select one or more items to apply to the new policy. Refer to "IT Policy settings" on page 129 for more information on the default policy items. When you click an item s check box, a corresponding window appears with the name and description of the IT policy that you selected. You can then assign a value to the IT policy or accept the default value if you do not assign a value. Refer to "Adding a third-party IT policy item" on page 120 for more information on adding new policy items. 6. When you finish, click OK. The new policy is created and the settings are applied. Adding a third-party IT policy item You can create IT policy items at the BlackBerry Enterprise Server Management level. Policy items can then be added to policies at the server level, and applied to users on that BlackBerry Enterprise Server. 1. Open BlackBerry Enterprise Server Management. 2. Right-click BlackBerry Server Management and click Properties. The BlackBerry Server Management Properties window appears. BlackBerry Server Management Properties window IT Policy items tab 120 BlackBerry Enterprise Server Software for Microsoft Exchange

121 Chapter 8: Managing IT Policy 3. Click the IT Policy items tab. 4. Click New item. The New Policy Item dialog box appears. New Policy Item dialog box 5. In the Policy Item field, type a name for your new, third-party IT policy item. 6. In the Description field, type a description of the new policy item. 7. From the Type drop-down list, select either boolean, integer, or string. If you select integer, the Min value and Max value fields become available and you must type minimum and maximum integer values for the policy item. 8. From the Destination drop-down list, select an option to apply the policy item to the handheld, the desktop, or both the handheld and desktop. 9. Click OK. The policy item settings are saved. After you create a policy item, you can add it to the default policy or any new third-party policy that you create, and apply the policy item to users by adding users to the policy s userlist. 121 BlackBerry Enterprise Server Software for Microsoft Exchange

122 Chapter 8: Managing IT Policy Editing a third-party policy item You can edit an existing IT policy item by changing its assigned parameters. 1. Open BlackBerry Enterprise Server Management. 2. Right-click BlackBerry Server Management and click Properties. The BlackBerry Server Management Properties window appears. BlackBerry Server Management Properties window IT Policy items tab 3. Select the IT Policy items tab. 4. Select a policy item from the list, and then click Edit item. 122 BlackBerry Enterprise Server Software for Microsoft Exchange

123 Chapter 8: Managing IT Policy 5. The Edit Policy Item window appears. Edit Policy Item window 6. In the Description field, you can edit the description of the policy item. 7. In the Type drop-down list, you can change the selection to either boolean, integer, or string. If you select integer, the Min value and Max value fields become available and you must enter minimum and maximum integer values for the policy item. 8. In the Destination drop-down list, you can change the option to apply the policy item to the handheld, the desktop, or both the handheld and desktop. 9. Click OK to accept the policy item settings. The IT policy item is updated. Editing policy key items in an existing policy When you create a new policy, you can configure it by adding policy items from the list of default and third-party policy items. You can also edit the existing Default policy to which all users are assigned by default, or edit any new policy you create, by adding or removing policy key items from the policy. 1. Open BlackBerry Enterprise Server Management. 123 BlackBerry Enterprise Server Software for Microsoft Exchange

124 Chapter 8: Managing IT Policy 2. Below BlackBerry Server Management, expand a site/routing group. Right-click a server and select IT Policy from the menu that appears. The IT Policy settings for BlackBerry Server window appears. IT Policy settings for BlackBerry Server window 3. From the IT Policy settings for BlackBerry Server window, select a policy. 4. Click Edit Policy. The Edit IT Policy window appears. Edit IT Policy window 5. To edit the policy, change the policy item selections and values as desired. 6. Click OK. 124 BlackBerry Enterprise Server Software for Microsoft Exchange

125 Chapter 8: Managing IT Policy Warning: When you update the policy item, it will automatically be resent to all users on the policy's userlist. Deleting a third-party IT policy item You can delete an IT policy item that you created. 1. Open BlackBerry Enterprise Server Management. 2. Right-click BlackBerry Server Management and click Properties. The BlackBerry Server Management Properties window appears. BlackBerry Server Management Properties window IT Policy items tab 3. Click the IT Policy items tab. 4. From the list, select a policy item, and then click Delete item. A dialog box appears. Warning dialog box Confirm delete policy item 125 BlackBerry Enterprise Server Software for Microsoft Exchange

126 Chapter 8: Managing IT Policy 5. If you want to delete the policy item, click Yes. If you do not want to delete the policy item, click No. If you click Yes, the policy item is removed from the list. Note: Default policy items cannot be modified or deleted and do not appear on this list. Regenerating the default policy item list If you added and/or removed policy items and want to return to the original (default) policy item list, you can restore the default items to the list. 1. Open BlackBerry Enterprise Server Management. 2. Right-click BlackBerry Server Management and click Properties. The BlackBerry Server Management Properties window appears. BlackBerry Server Management Properties window IT Policy items tab 3. Click the IT Policy items tab. 4. Click Regenerate defaults. Any policy item(s) that you added are removed. 126 BlackBerry Enterprise Server Software for Microsoft Exchange

127 Chapter 8: Managing IT Policy Note: Default policy items cannot be modified or deleted and do not appear on this list. Editing a policy userlist You can apply the policy you create to one or more users. Add further users to the policy userlist by editing the policy userlist. 1. Open BlackBerry Enterprise Server Management. 2. Below BlackBerry Server Management, expand a site/routing group. Right-click a server and click IT Policy. The IT Policy settings for BlackBerry Server window appears. IT Policy settings for BlackBerry Server window 3. From the IT Policy settings for BlackBerry Server window, select a policy. 127 BlackBerry Enterprise Server Software for Microsoft Exchange

128 Chapter 8: Managing IT Policy 4. Click Edit Policy Userlist. The Edit IT Policy Userlist window appears. Edit IT Policy Userlist window The policy name to which users are assigned appears, grayed-out, in the Policy Name field. 5. Click Add Users. The Select Users window appears. 6. From the list of users, select one or more users to add to the policy. To select multiple users, hold CTRL while selecting users. 7. Click OK to return to the Edit Policy Userlist window. The selected users appear in the window with a status listed. The users you selected are assigned to the policy and no longer appear as available users in the Select Users window. 8. Click OK. You return to the Select Users window. 128 BlackBerry Enterprise Server Software for Microsoft Exchange

129 Chapter 9 IT Policy settings This section provides information on the following IT Policy keys: AllowBCCRecipients AllowBrowser AllowOtherBrowserServices AllowOther Services AllowPINtoPIN AllowPhone AllowSMS AutoBackupEnabled AutoBackupExclude AutoBackupExcludeSync AutoBackupFrequency AutoBackupIncludeAll AutoSignature DefaultBrowserConfigUID DisableWirelessCalendar DontSaveSentMessage ConflictDesktopWins EnableWAPConfig ForcedHandheldUpdateMessage

130 Chapter 9: IT Policy settings ForcedHandheldUpdateWarnings ForwardMessagesInCradle IntranetConfigReadOnly IntranetHomeDeck LongTermTimeoutEnable MaxPasswordAgeInDays MaxSecurityTimeout MessagePrompt MinPasswordLength PasswordPatternChecks PasswordRequired ShowApplicationLoader ShowWebLink Sync InsteadofImport UserCanChangeTimeout UserCanDisablePassword WebLinkLabel WebLinkURL Instructions for configuring IT policies using these policy keys are provided throughout this chapter. They are also outlined in the BlackBerry Enterprise Server Management online Help. The wireless IT Policy synchronization feature of BlackBerry Enterprise Server Management enables you to configure BlackBerry Desktop Manager and handheld settings on a server-by-server basis. All users are, by default, added to the policy called Default; users can be added to a new policy (which automatically removes them from the original policy because they can be assigned to only one policy at a time). New policy settings can be added (Refer to "Adding a third-party IT policy item" on page 120 for more information), and will automatically appear on the list of policy items when you create or edit a policy. 130 BlackBerry Enterprise Server Software for Microsoft Exchange

131 IT policy item settings Policy settings are synchronized and updated whenever the BlackBerry Desktop Manager is run online. Handheld settings are updated each time that the handheld is in the cradle while running BlackBerry Desktop Manager online, and can be updated periodically over the wireless network. At the server level within BlackBerry Enterprise Server Management, you can configure IT policies and assign them to users on the BlackBerry Enterprise Server. IT policy item settings Configure a policy item by applying any of the following IT policy keys and/or any third-party policy items you create. AllowBCCRecipients The AllowBCCRecipients policy controls whether users can specify BCC recipients on messages. Click TRUE to make this functionality available to handheld users, or click FALSE to make BCC recipients unavailable to handheld users. AllowBCCRecipients policy setting dialog box Administration Guide 131

132 Chapter 9: IT Policy settings AllowBrowser The AllowBrowser policy controls whether handheld users can use the RIM-provided Browser on the handheld. Click TRUE to make this functionality available to handheld users, or click FALSE to exclude handheld users from using the Browser. AllowBrowser policy setting dialog box AllowOtherBrowserServices The AllowOtherBrowserServices policy controls whether handheld users can use other Browser transport service books on the handheld. Click TRUE to make this functionality available to handheld users, or click FALSE to exclude handheld users from using other Browser transport service books, forcing all Browser traffic to be routed through your organization's BlackBerry Enterprise Server, and disabling any other Browser-transport service books so that they are rejected by the handheld. AllowOtherBrowserServices policy setting dialog box 132 BlackBerry Enterprise Server Software for Microsoft Exchange

133 IT policy item settings AllowOther Services The AllowOther Services policy controls whether handheld users can use services other than the Enterprise service on the handheld. Click TRUE to make this functionality available to handheld users, or click FALSE to exclude handheld users from using other service books and remove any other service books from the handheld. AllowPINtoPIN AllowOther Services policy setting dialog box The AllowPINtoPIN policy controls whether handheld users can use PIN to PIN messaging on the handheld. Click TRUE to make this functionality available to handheld users, or click FALSE to exclude handheld users from using PIN to PIN messaging and make it unavailable on the handheld. AllowPINtoPIN policy setting dialog box Administration Guide 133

134 Chapter 9: IT Policy settings AllowPhone The AllowPhone policy controls whether handheld users can use the phone capabilities of the handheld. Click TRUE to make this functionality available to handheld users, or click FALSE to exclude handheld users from using the phone functionality and make it unavailable on the handheld. Warning: The handheld(s) to which you apply the AllowPhone policy setting are automatically reset, enabling the new policy setting to take effect. (This policy setting is available only on the BlackBerry 5800 Series and BlackBerry 6700 Series of wireless handhelds.) AllowSMS AllowPhone policy setting dialog box The AllowSMS policy controls whether handheld users can use SMS messaging on the handheld. Click TRUE to make this functionality available to handheld users, or click FALSE to exclude handheld users from using SMS messaging and make it unavailable on the handheld. (This policy setting is available only on the BlackBerry 5800 Series and BlackBerry 6700 Series of wireless handhelds.) AllowSMS policy setting dialog box 134 BlackBerry Enterprise Server Software for Microsoft Exchange

135 IT policy item settings AutoBackupEnabled The AutoBackupEnabled policy controls the enabling of the Automatically backup my handheld option. Click TRUE to enable prompting for automatic backups, or click FALSE to disable prompting for automatic backups. AutoBackupEnabled policy setting dialog box AutoBackupExclude The AutoBackupExclude policy controls whether can be excluded from automatic backups. Click TRUE to enable to be excluded, or click FALSE to include in backups. Note: The policy key AutoBackupIncludeAll must be set to FALSE if this key is set to TRUE. AutoBackupExclude policy setting dialog box Administration Guide 135

136 Chapter 9: IT Policy settings AutoBackupExcludeSync The AutoBackupExcludeSync policy controls whether synchronized application data (data configured for synchronization with Intellisync) can be excluded from automatic backups. Click TRUE to enable synchronized application data to be excluded, or click FALSE to include synchronized application data in backups. Note: The policy key AutoBackupIncludeAll must be set to FALSE if this key is set to TRUE. AutoBackupExcludeSync policy setting dialog box AutoBackupFrequency The AutoBackupFrequency policy controls how often an automatic backup is performed. Its value is measured in days. Type the number of days to occur between automatic backups in the field provided, and then click OK. AutoBackupFrequency policy setting dialog box 136 BlackBerry Enterprise Server Software for Microsoft Exchange

137 IT policy item settings AutoBackupIncludeAll The AutoBackupIncludeAll policy controls whether all data can be included in automatic backups. Click TRUE to enable all data to be included and to select the Backup all handheld application data option, or click FALSE to enable some data to be excluded from backups. Note: The policy key AutoBackupIncludeAll must be set to FALSE if the AutoBackupExcludeSync and AutoBackupExclude keys are set to TRUE. AutoSignature AutoBackupIncludeAll policy setting dialog box The AutoSignature policy setting enables you to set the value of the signature to be automatically attached to the handheld user s messages. Type the text of the signature in the field provided, and then click OK. AutoSignature policy setting dialog box Administration Guide 137

138 Chapter 9: IT Policy settings DefaultBrowserConfigUID The DefaultBrowserConfigUID policy setting enables you to set a user ID for the default Browser Configuration Service record. Type the user ID in the field provided, and then click OK. (This policy setting is available only on the BlackBerry 5800 Series and BlackBerry 6700 Series of wireless handhelds.) DefaultBrowserConfigUID policy setting dialog box DisableWirelessCalendar The DisableWirelessCalendar policy allows you to determine whether the wireless calendar synchronization option is available to handheld users. Click TRUE to make this functionality unavailable to handheld users, or click FALSE to allow handheld users to use the wireless calendar synchronization option. Note: Wireless calendar synchronization is only available with BlackBerry version 2.1 and later handheld and desktop software. DisableWirelessCalendar policy setting dialog box 138 BlackBerry Enterprise Server Software for Microsoft Exchange

139 IT policy item settings DontSaveSentMessages The DontSaveSentMessages policy enables you to determine whether a copy of each message sent by the handheld user is saved to a Sent Messages folder. Click TRUE to prevent saving sent messages, or click FALSE to save sent messages. DontSaveSentMessages policy setting dialog box ConflictDesktopWins The ConflictDesktopWins policy setting enables you to determine what happens when a conflict occurs between the desktop and the handheld during synchronization. Click TRUE to enable desktop information to overrule handheld information, or click FALSE to enable handheld information to overrule desktop information. ConflictDesktopWins policy setting dialog box Administration Guide 139

140 Chapter 9: IT Policy settings EnableWAPConfig The EnableWAPConfig policy setting enables you to disable (hide) the WAP browser icon even if the carrier has provisioned the WAP browser and the appropriate service books are present. This policy applies to Java-enabled handhelds only. click FALSE to hide the WAP browser icon on the handheld; click TRUE to enable the WAP browser icon on the handheld. EnableWAPConfig policy setting dialog box ForcedHandheldUpdateMessage The ForcedHandheldUpdateMessage policy setting enables you to set a string that appears (in place of the default string) when users are required to update to a later version of the BlackBerry handheld. Type a string in the field provided, and then click OK. ForcedHandheldUpdateMessage policy setting dialog box 140 BlackBerry Enterprise Server Software for Microsoft Exchange

141 IT policy item settings ForcedHandheldUpdateWarnings The ForcedHandheldUpdateWarnings policy setting enables you to determine how many times a handheld user is allowed to decline when prompted to update the handheld. Type the number of times the user can decline when prompted before a forced handheld update occurs, and then click OK. ForcedHandheldUpdateWarnings policy setting dialog box ForwardMessagesInCradle The ForwardMessagesInCradle policy setting enables you to determine whether the handheld continues to receive messages while the handheld is in the docking/charging cradle. Click TRUE to enable the handheld user it receive while the handheld is in the cradle, or click FALSE to prevent the handheld from receiving when in the cradle. ForwardMessagesInCradle policy setting dialog box Administration Guide 141

142 Chapter 9: IT Policy settings IntranetConfigReadOnly The IntranetConfigReadOnly policy setting enables you to specify if the URL address of the Home Page can be modified by the handheld user. Click TRUE to make the URL Read-Only (not writable); click FALSE to make the URL not Read-Only (writable). IntranetConfigReadOnly policy setting dialog box IntranetHomeDeck The IntranetHomeDeck policy setting enables you to specify the URL address of the Home Page used by the WML Browser. If you do not specify a URL, the handheld will use the default Home Page URL address. To specify a URL, type the URL in the empty field provided, and then click OK. IntranetHomeDeck policy setting dialog box 142 BlackBerry Enterprise Server Software for Microsoft Exchange

143 IT policy item settings LongTermTimeoutEnable The LongTermTimeoutEnable policy setting enables you to determine whether the log term security time out is enabled or disabled on the handheld. Click TRUE to enable a long term security time-out on the handheld, or click FALSE to disable the time-out. (This policy setting is available only on the BlackBerry 5800 Series and BlackBerry 6700 Series of wireless handhelds.) LongTermTimeoutEnable policy setting dialog box MaxPasswordAgeInDays The MaxPasswordAgeInDays policy setting enables you to determine how many days until a handheld user s password expires. In the field provided, type the number of days between password expiries (a minimum value of 0 and a maximum value of is allowed), and then click OK. A value of 0 disables password aging. MaxPasswordAgeInDays policy setting dialog box Administration Guide 143

144 Chapter 9: IT Policy settings MaxSecurityTimeout The MaxSecurityTimeout policy setting enables you to set the maximum time in minutes allowed before a handheld security time out occurs. In the field provided, type the number of minutes until the time out occurs (a minimum value of 1 and a maximum value of 60 is allowed), and then click OK. The handheld user can select any time out value less than the maximum value. MessagePrompt MaxSecurityTimeout policy setting dialog box The MessagePrompt policy setting enables you to set the value of a message to appear when BlackBerry Desktop Manager is started. Type the text of the message in the field provided, and then click OK. MessagePrompt policy setting dialog box 144 BlackBerry Enterprise Server Software for Microsoft Exchange

145 IT policy item settings MinPasswordLength The MinPasswordLength policy setting enables you to specify the minimum allowable length of the handheld security password, in characters, which must be between 4 and 15 characters inclusive. Type the minimum number of password characters in the field provided, and then click OK. MinPasswordLength policy setting dialog box PasswordPatternChecks The PasswordPatternChecks policy setting enables you to create a pattern check on the handheld security password. Type 0 in the field provided to perform no password pattern check, or type 1 in the field provided to require that the password has at least one digit and one letter to be acceptable, and then click OK. PasswordPatternChecks policy setting dialog box Administration Guide 145

146 Chapter 9: IT Policy settings PasswordRequired The PasswordRequired policy setting enables you to determine whether the handheld requires a security password. Click TRUE to enable a required password on the handheld, or click FALSE to disable the password requirement on the handheld. The user still has the ability to disable the password on the handheld unless you also configure the UserCanDisablePassword policy item with a FALSE value. PasswordRequired policy setting dialog box ShowApplicationLoader The ShowApplicationLoader policy setting enables you to determine whether the handheld user has access to the application loader on the Desktop. Click TRUE to make this functionality available to the handheld user, or click FALSE to hide the application loader from the user. ShowApplicationLoader policy setting dialog box 146 BlackBerry Enterprise Server Software for Microsoft Exchange

147 IT policy item settings ShowWebLink The ShowWebLink policy setting enables you to determine whether the handheld user has access to the Web Link icon on the Desktop. Click TRUE to make the icon available to the handheld user, or click FALSE to hide the icon from the user. This setting requires that you also specify a value for the WebLinkURL setting. ShowWebLink policy setting dialog box Sync InsteadofImport The Sync InsteadofImport policy setting enables you to determine whether an and folder synchronization can occur instead of an import of information on the handheld. Click TRUE to enable the synchronization option, or click FALSE to disable the option. Sync InsteadofImport policy setting dialog box Administration Guide 147

148 Chapter 9: IT Policy settings UserCanChangeTimeout The UserCanChangeTimeout policy setting enables you to determine whether the handheld user can change the specified security time out. Click TRUE to enable this option, or click FALSE to disable the option. UserCanChangeTimeout policy setting dialog box UserCanDisablePassword The UserCanDisablePassword policy setting enables you to determine whether the handheld user can disable the specified security password. Click TRUE to enable this option, or click FALSE to disable the option. UserCanDisablePassword policy setting dialog box 148 BlackBerry Enterprise Server Software for Microsoft Exchange

149 IT policy item settings WebLinkLabel The WebLinkLabel policy setting enables you to specify the label for the Web Link icon, if it appears on the Desktop. Type a label in the field provided, and then click OK. WebLinkURL WebLinkLabel policy setting dialog box The WebLinkURL policy setting enables you to specify the URL for the Web Link icon, if it appears on the Desktop. Type a valid URL in the field provided, and then click OK. This setting requires that you also set ShowWebLink to true. WebLinkURL policy setting dialog box Administration Guide 149

150

151 Chapter 10 Understanding and monitoring Mobile Data Service This section includes information on the following topics: Mobile Data Service architecture Mobile Data Service connections Clients and servers Monitoring the Mobile Data Service

152 Chapter 10: Understanding and monitoring Mobile Data Service Mobile Data Service architecture The Mobile Data Service, as part of the BlackBerry Enterprise Server solution, provides a gateway between handhelds and Internet Protocol (IP) networks. With this gateway in place, BlackBerry users enjoy remote access to more than their . With the Mobile Data Service installed and activated, users can also access the Internet and corporate applications. Multiple BlackBerry Enterprise Servers can be installed in a corporate system; multiple Mobile Data Service can also be installed. Each Mobile Data Service has its own settings, functions, and hierarchy within the overall corporate architecture, and each Mobile Data Service intercepts, processes, and directs information based on configuration settings, handheld application requirements, and content server availability. Each BlackBerry Enterprise Server includes both an Service and a Mobile Data Service; one service manages data, the other manages intranet data. The following diagram shows how these two services fit into the BlackBerry Enterprise Server architecture: 152 BlackBerry Enterprise Server Software for Microsoft Exchange

153 Mobile Data Service architecture BlackBerry Enterprise Servers within a corporate system Administration Guide 153

154 Chapter 10: Understanding and monitoring Mobile Data Service Handheld applications Developers can write applications for the handheld that use the Mobile Data Service functionality. For example, a Browser application enables BlackBerry users to download web pages to their handhelds. Running a Browser application from a handheld requires the Mobile Data Service to verify that the correct server is contacted, the correct information is retrieved, and the correct format is used to send the data back to the user. Intranet applications Developers can also write applications that act on the corporate server, without being first initiated by the handheld. These push applications require a go-between that can communicate with handhelds, manage the information, and help complete the server s action. For example, writing a stock ticker program that pushes stock quotes from a server to BlackBerry users requires the Mobile Data Service to direct the flow of information to the correct handheld at the correct time. Centralized Push The Centralized Push server manages data that is sent from the corporate server to a particular handheld. The Centralized Push server has access to the same database settings as all the BlackBerry Enterprise Servers do, and can look up handheld information to redirect network content to the appropriate Mobile Data Service. Only one BlackBerry Enterprise Server with Mobile Data Service can be designated as the Centralized Push server. Security The BlackBerry Enterprise Server encrypts data before sending it over the wireless network. To learn more about data encryption, refer to the BlackBerry Wireless Handheld with S/MIME Support User Guide Supplement on the BlackBerry web site ( The Mobile Data Service, in conjunction with the BlackBerry Enterprise Server system, uses this encryption process as well. As a result, Mobile Data Service packets can share the encryption key that is exchanged when the handheld and the user s computer are last synchronized. Internet data is encrypted, and a handheld s Internet activity is as secure as its traffic. 154 BlackBerry Enterprise Server Software for Microsoft Exchange

155 Mobile Data Service architecture Data routing: the Mobile Data Service as a channel The Mobile Data Service performs address translation and routes information to the correct destinations, which enables both networks to communicate with each other without having to be combined into one network. Data conversion: the Mobile Data Service as a transcoder Part of the Mobile Data Service s function as a proxy is transcoding: the process in which one data format is converted into another data format. Intranet and wireless networks cannot use methods to actually route the data within a particular network domain. As a result, Internet and wireless networks cannot be combined directly into one network domain both deliver network packets to network nodes using different protocols. To incorporate wireless and network domains successfully, a gateway must be established between the two. The Mobile Data Service acts as this gateway, modifying Internet data to match the handheld s wireless requirements. The Mobile Data Service s configuration files store mappings of possible content exchanges between two sources. The Mobile Data Service uses these mappings to determine which transcoder to use for any given situation (or if one is even necessary). In addition to these mappings, handheld and push applications can also request that specific transcoders are applied, regardless of the nature of the exchange. Administration Guide 155

156 Chapter 10: Understanding and monitoring Mobile Data Service Mobile Data Service connections Mobile Data Service requires routing information before it can direct traffic from a server to a particular handheld. The server also needs this routing information to establish a connection with the handheld application. Routing information consists of the handheld s address and port number. The address identifies the handheld; the port number identifies the handheld application that is requesting the content from the network. After routing information is established, the requested connections are made. Two kinds of connections are possible between networks and the handheld: inbound connections and outbound connections. Both types of connections pass through the BlackBerry Enterprise Server to verify that the data that is flowing between the two sources, along the connection, passes through the Mobile Data Service first. Inbound connections An inbound connection is a connection that is initiated by the content server, not the handheld application. Inbound connections are used to implement the server push model, in which the handheld receives data from the content server without having to issue a request for it. Example Data flow that is created by an inbound connection A stock ticker application is a common example of how an inbound connection works. A stock ticker application displays various stock values on the handheld, which are updated automatically to reflect market changes. The handheld receives stock price updates from the Internet, without having to 156 BlackBerry Enterprise Server Software for Microsoft Exchange

157 Mobile Data Service connections request them explicitly every time. The server pushes this stock market data to the handheld through an inbound connection the flow of information is 1-way, and it is initiated by a server, not the handheld. How the push application works A push application on the server sends a request over an open, inbound connection with a handheld application. This push application makes the request and starts sending data using this connection. The request is routed through the Mobile Data Service, which then maps and translates it so that it can be forwarded to the destination handheld application successfully. The data that follows the request also passes through the Mobile Data Service, because it might need to be altered first using Mobile Data Service transcoders. In addition, the push application might also specify that a certain transcoder must be applied. Code to execute this command is required only on the initiating server, and no acknowledgement occurs of the success or failure of the data transmission. Outbound connections Outbound connections are used by the handheld to both send and receive data with Internet servers. Outbound connections are different from inbound connections because the initial data request comes from the handheld; the server must be prompted before it can pass on any information. This is not an automatic server process. In the following diagram, a handheld application initiates a connection to the server (using the Mobile Data Service). Outbound connection data flow Using the outbound connection, the handheld application sends a request for information (1). The Mobile Data Service maps the request, compares it to what is available on the server, and then either passes it to the server Administration Guide 157

158 Chapter 10: Understanding and monitoring Mobile Data Service untouched, or creates a new request to search for information that the Mobile Data Service can modify to suit the handheld s needs. The server resends the required content to the Mobile Data Service (2), which is then either sent to the handheld application as it is, or is passed on after any required modifications. Example Web browsers commonly use outbound connections. The web browser is only active when it is called upon by a user, and data is only passed through this outbound connection as it is required. Bidirectional communication with TCP/IP A bidirectional connection between the handheld and a server persists, or remains open, until it is closed explicitly by either end. This type of connection can only be originated at the handheld, and enables an extended dialogue between the handheld and the server. To conduct this type of communication, code is required on both the handheld and the server. Refer to the HTTP API Reference Guide on the BlackBerry web site ( for more information on writing BlackBerry applications that use HTTP. Error notification Notification is sent from a server to a handheld to signal connection and transmission failures. The user is not notified of errors that occur during server push communication, or when data is being sent from the server to a handheld. 158 BlackBerry Enterprise Server Software for Microsoft Exchange

159 Clients and servers Clients and servers The client/server system involves the communication of information between two sources: the client and the server. Basically, the client talks to the server, requesting that particular information is passed on or processed. The World Wide Web is the one of the most widely used client/server systems available. For the BlackBerry solution, access to this particular client/server model has broadened the handheld capabilities. Beyond sending and receiving , handheld users can now browse web pages, and gain access to intranet applications on other networks. How the client and the server communicate The handheld exchanges information with a content server. A content server is a server that provides access to content, such as images, web pages, or databases. A handheld application (such as the intranet Browser) must be able to communicate with a content server to gain access to web content (such as an Internet site). Handheld applications might also need the content server to provide corporate data, such as database files or application information. This flow of data is managed using Hypertext Transfer Protocol (HTTP), a request-response protocol that is designed to send and receive messages between a web client and a web server. Direct communication One way in which HTTP messages are exchanged is through the direct method. Direct flow between client and server In this situation, the client sends a request message to the server directly (1), and then the server responds to the request (2). After this exchange is complete, the connection is closed. Administration Guide 159

160 Chapter 10: Understanding and monitoring Mobile Data Service With the BlackBerry solution, the direct flow between the handheld application and the content server does not occur all information must pass through the Mobile Data Service first. Communication through a proxy Another way in which HTTP messages are exchanged is through a proxy. Data flow mediated by a proxy In this situation, the client sends a request to an intermediary agent (a proxy) (1), instead of the server. The proxy sends the request to the server on behalf of the client. Similarly, the server responds to the proxy and not to the client directly (2). Finally, the proxy sends the response to the client (3). As the intermediary agent, the Mobile Data Service acts as a proxy for the data that is flowing from the handheld to the content server. Beyond reducing heavy traffic to the handheld, this method is also useful because the Mobile Data Service transcodes the data that is passing to the handheld, if necessary. Communication through a channel Another way in which HTTP messages are exchanged is through a channel. Data flow mediated by a channel 160 BlackBerry Enterprise Server Software for Microsoft Exchange

161 Monitoring the Mobile Data Service In this situation, the client sends a request through an intermediary agent (a channel) (1). The channel passes the request to the server blindly, funneling information to the correct destination, but no more. The server sends back the response, which also passes through the channel before returning to the client (2). As intermediary agent, the Mobile Data Service proxy can also act as a channel. When information does not need to be transcoded or modified, the Mobile Data Service passes the requests and responses to their destinations, untouched. Monitoring the Mobile Data Service You can monitor the state of the Mobile Data Service in two ways: viewing the system log files viewing the Mobile Data Service monitor page Viewing log files Log files are text files that are located in the Mobile Data Service logs folder. These log files have the following format: Day_Month_Year.console.log. Note: The Mobile Data Service does not rotate or delete stored log files automatically. If you want to clean up previously saved log files, you must do so manually. Before you check the log files, verify that the Mobile Data Service is active and connected to the correct port. Reading the logs The console log file records every packet that the Mobile Data Service (MDS) sends or receives between the wireless network and the Internet or intranet. In particular, if you are troubleshooting problems with the Mobile Data Service, you should check for log entries where LAYER = WebServer or LAYER = SRP. These entries can indicate problems that the MDS is having when connecting to the wireless network, the BlackBerry Enterprise Server, or the database. Administration Guide 161

162 Chapter 10: Understanding and monitoring Mobile Data Service Each log entry has the following format: <timestamp>(<log_number>)[<hostname>]layer=<layer>, EVENT= <event> where: timestamp is the date and time when the log entry was recorded log_number is a sequential number for the log entry hostname is the name of the computer on which the MDS is running For example: <4/18/2002 3:35:58> (69)[STOOKE-W2K] LAYER = IPPP, EVENT = Executing The information included in each log entry depends on the layer and event. The following table describes the information that is typically provided for IPPP packets. 162 BlackBerry Enterprise Server Software for Microsoft Exchange

163 Monitoring the Mobile Data Service Log Information LAYER EVENT TAG DEVICEPIN VERSION CONNECTIONID SEQUENCE Description identifies the network layer of the packet, such as IPPP identifies the action that the Mobile Data Service is taking with the packet; for example: Connected HTTP Connection has been established Disconnected HTTP Connection is closed Executing Mobile Data Service is executing a type of packet CreatedQueue Mobile Data Service has created the queue to hold IPPP packets RemovedQueue Mobile Data Service has removed the queue that holds IPPP packets; this occurs if there is no activity related to a particular handheld. Refused Mobile Data Service refused to execute an IPPP packet Dropped Mobile Data Service dropped a packet when it reached an overload state Sending Mobile Data Service is sending a packet to a handheld Receiving Mobile Data Service is receiving a packet from a handheld a unique number assigned to each packet by the Mobile Data Service PIN of the handheld with which the Mobile Data Service is communicating protocol version a unique number that the Mobile Data Service assigns to each handheld connection When the Mobile Data Service breaks content into smaller IPPP packets, the sequence number represents the order of these packets. The maximum IPPP packet size cannot exceed 30 KB. The Mobile Data Service breaks any content that it receives that exceeds this size. Administration Guide 163

164 Chapter 10: Understanding and monitoring Mobile Data Service Log Information TYPE CONNECTIONHANDLER PROTOCOL PARAMETERS SIZE Description packet type that identifies what action the packet is requesting; for example: CONNECTION-REQUEST asking to establish a connection DATA passing data onto a connection ERROR alerting that an error has occurred NOTIFY asking to establish a connection and close it immediately (for push applications) DISCONNECT-ORDER asking to disconnect a connection identifies the type of network connection that the handheld has requested, such as http or https identifies the network protocol that the Mobile Data Service is using; currently this is always TCP specifies connection protocol parameters, such as host:port for the connection destination payload size of the packet Verifying Mobile Data Service status 1. On your handheld, start your Browser. 2. In the Browser Address field, type: <web_server_port>/about where web_server_port is the port set in the Web Server Listen Port parameter in the Mobile Data Service general properties. Refer to "General parameters" on page 42 for more information. If the Mobile Data Service is active, it returns a page that displays information that is similar to the following: Mobile Data Service Version :05:54-17/05/2001. If the Mobile Data Service is not active, it either is not running or is listening on a different port. 164 BlackBerry Enterprise Server Software for Microsoft Exchange

165 Chapter 10: Understanding and monitoring Mobile Data Service Monitoring Mobile Data Service operation The Mobile Data Service displays information about its recent activity in an HTML page that you can view with your web Browser. This page is designed to provide information about the operational state and condition of the Mobile Data Service, such as whether or not the system is running, currently in use, or experiencing any errors. Check the Mobile Data Service status 1. On your handheld, start your Browser. 2. In the Browser Address field, type: <web_server_port>/monitor where web_server_port is the port set in the Web Server Listen Port parameter in the Mobile Data Service general properties. Refer to "General parameters" on page 42 for more information. The monitor page appears. Sample monitor page output 165 BlackBerry Enterprise Server Software for Microsoft Exchange

166 Chapter 10: Understanding and monitoring Mobile Data Service Customizing the monitor page The Mobile Data Service monitor page is monitor.html, located in the Mobile Data Service config folder. You can customize this page to change both its format and content. 1. Browse to the config subdirectory of the Mobile Data Service. 2. Open the monitor.html file in a text or HTML editor. 3. Add or remove variables, and modify parameters, to change the content of the monitor page. 4. Save your changes. 5. Close the editor. 6. Restart the Mobile Data Service to update the monitor.html file. Monitor variables The default monitor template displays traffic and error variables within sample ranges of one hour, six hours, and one day. You can add or remove variables, and change variable parameters, to control what information is displayed. The following table lists traffic-oriented variables that you can include on the monitor page. Variable DevicesConnections ServersConnections PacketSizeOf DevicesConnections PacketSizeOfServersConnections Description number of handheld-initiated connections received by the Mobile Data Service number of server-initiated connections received by the Mobile Data Service current packet size being sent to handhelds by the Mobile Data Service current packet size being received by the Mobile Data Service from application servers 166 BlackBerry Enterprise Server Software for Microsoft Exchange

167 Chapter 10: Understanding and monitoring Mobile Data Service The following table lists error-oriented variables that you can include on the monitor page. Variable RefusedPackets InvalidPackets ConnectionSuccess ConnectionUnsuccess IsConnected LastConnectionAttempt TruncatedConnections DateIPProxyStarted Description number of packets refused by the Mobile Data Service number of invalid packets received by the Mobile Data Service number of successful connections achieved by the Mobile Data Service number of unsuccessful connections experienced by the Mobile Data Service a string that indicates whether or not the Mobile Data Service is connected date and time of the last connection attempt made by the Mobile Data Service number of truncated connections encountered by the Mobile Data Service date that the Mobile Data Service started Variable parameters You can change parameters for each monitor variable to control what information is displayed. For example, to show the maximum number of connections that were made in the last hour, use the following tag, in which the format is: tag_token (<name>, <time>, <operation>)tag_token: MV(DevicesConnections, 60, max)mv Pararameter Definition tag_token name time operation MV specifies the variable name (a string with no spaces) specifies the duration of time (in minutes) specifies the operation to use (min, max, or average) for counter variables; this is ignored for boolean variables 167 BlackBerry Enterprise Server Software for Microsoft Exchange

168 Chapter 10: Understanding and monitoring Mobile Data Service Parameters must be formatted in a specific way. Any line that does not have a well-formatted parameter is returned in the monitor window without modification: If the template does not load, the Mobile Data Service returns an error notification instead of the monitor display. If the parameter is well formed but does not contain the name of a valid monitor variable, the Mobile Data Service returns INVALID_MONITOR_VARIABLE instead of the entire string in the display. If the parameter is well formed but contains no value, or no value has yet been set for it, the Mobile Data Service returns VARIABLE_UNAVAILABLE. 168 BlackBerry Enterprise Server Software for Microsoft Exchange

169 Chapter 11 Using the command line utilities This section provides information on the following topics: Backup and Restore utility HandheldCleanup.exe utility Fix Mapisvc.inf utility BlackBerry Server Permissions Tester SRP Connection Tester Performance Monitor Repair Tool BlackBerry Database Consistency Service utility

170 Chapter 11: Using the command line utilities These utilities are installed by default unless you cleared them during the installation process. The utilities can be run from a command line and are available with BlackBerry Enterprise Server Software. Installation of Mobile Data Service includes the BlackBerry Database Consistency Service utility. Refer to Postinstallation procedures in the BlackBerry Enterprise Server for Microsoft Exchange 5.5 Installation Guide or BlackBerry Enterprise Server for Microsoft Exchange 2000 Installation Guide for information on using the BlackBerry User Administration command line tools. Backup and Restore utility BlackBerryBackup.exe is a disaster-recovery tool that backs up and restores BlackBerry information from users mailboxes. Running BlackBerryBackup.exe 1. At a command prompt, switch to the directory in which the installed utilities are stored (root_directory:\\program Files\Research In Motion\BlackBerry Enterprise Server\Utility\). 2. At the command prompt, type BlackBerryBackup.exe to view a list of the flags that can be used to perform specific BlackBerryBackup.exe functions. BlackBerryBackup.exe run at the command prompt 170 BlackBerry Enterprise Server Software for Microsoft Exchange

171 Backup and Restore utility Commands BlackBerryBackup.exe -b [-o filename/-i filename] <-n/-r/-f> BlackBerryBackup.exe -u [-o filename/-i filename] <-d/-n> BlackBerryBackup.exe -r [-o filename/-i filename] Description This command performs a backup/restore of all user information. This command performs a backup/restore on a single user. This command performs a backup/restore on the BlackBerry Enterprise Server configuration information. The -r flag can also be used in conjunction with the -b flag. BlackBerryBackup.exe -p [-i filename] [-o filename] BlackBerryBackup.exe -o filename BlackBerryBackup.exe -i filename BlackBerryBackup.exe -f filename This command prints user information to file from the specified input file. This command specifies the file to which you back up information. This command specifies the file from which you restore information. This command specifies a backup file containing list of users. The first line must be the number of users in the file, each user must appear on a separate line, and the last character must be a new line character. -d This command specifies the Display Name of the user whose information data is to be backed up/restored. If the Display Name is not provided, the user is prompted for it. The -d flag can only be used with the -u flag. -n This command specifies the BlackBerry Enterprise Server name (it can be used with all flags except -p). If the name is not provided, the user is prompted for it. 3. At the command prompt, type a command. Examples of commands that use values for file and server name variables are provided in the next table. Administration Guide 171

172 Chapter 11: Using the command line utilities Examples Description -b -o backup.txt This command example performs a backup of an entire BlackBerry Enterprise Server to an output file called backup.txt. -u -i user1.txt This command example loads a single user from an input file called user1.txt. -r -i bes.txt -n "Test BES" This command example loads the BlackBerry Enterprise Server configuration information from an input file called bes.txt into a server called Test BES. -p -i bes.txt -o print_bes.txt This command example creates a printable version of the data in an input file called bes.txt and outputs it to a file called print_bes.txt. Note: Brackets [ ] around a flag indicate a mandatory flag; angle brackets <> around a flag indicate an optional flag. HandheldCleanup.exe utility This utility retrieves and updates configuration information for BlackBerry Enterprise Servers and users. Running HandheldCleanup.exe 1. At a command prompt, switch to the directory in which the installed utilities are stored (root_directory:\\program Files\Research In Motion\BlackBerry Enterprise Server\Utility\). 172 BlackBerry Enterprise Server Software for Microsoft Exchange

173 HandheldCleanup.exe utility 2. Type HandheldCleanup.exe to view the list of commands that can be used with HandheldCleanup. HandheldCleanup.exe run at the command prompt Administration Guide 173

174 Chapter 11: Using the command line utilities Commands -d [<filename>] [-p <MAPI profilename>] -a [<filename>] [-p <MAPI profilename>] Description This command stores the handheld information for each handheld on a specified BlackBerry Enterprise Server (the prompt for a BlackBerry Enterprise Server name appears). Optional arguments: <filename> is a filename to dump handheld information to. If it is not specified, the information is dumped to the screen -p is a flag to signify a profile <MAPI profilename> is an existing MAPI profile name This command stores the information of all existing BlackBerry Enterprise Servers. Optional arguments: <filename> is a filename to store handheld information to. If the filename is not specified, the information is stores on the screen. -p is a flag to signify a profile <MAPI profilename> is an existing MAPI profile name -p <MAPI profilename> This command signifies a profile; it is combined with <MAPI profilename> which specifies an existing MAPI profile name. 174 BlackBerry Enterprise Server Software for Microsoft Exchange

175 HandheldCleanup.exe utility Commands Description -u [-p <MAPI profilename>] This command performs the following tasks: Performs handheld mailbox check and update; checks for any mailboxes that have been moved. If the mailbox is moved, the ServerDN is set to the Global Address List s ServerDN. Any handhelds with ServerDN changed are printed. Otherwise, no output is given. Note: The Global Address List does not contain hidden mailboxes. Optional arguments: <filename> is a filename to which handheld information is dumped. If it is not specified, the information is dumped to the screen. -p is a flag to signify a profile <MAPI profilename> is an existing MAPI profile name. Administration Guide 175

176 Chapter 11: Using the command line utilities Commands -m [-p <MAPI profilename>] This command detects an administration mailbox move for any existing BlackBerry Enterprise Servers and updates the corresponding information when necessary. Optional arguments: <filename> is a filename to which handheld information is dumped. If it is not specified the information is stored on the screen. -p is a flag to signify a profile <MAPI profilename> is an existing MAPI profile name. -i <filename> [-p <MAPI profilename>] Description This command imports the BlackBerry Enterprise Servers that are listed in the specified import file. The format of the import file should be a tab-delimited list of the following fields <Server name>, <Admin mailbox display name>, <ServerDN>, and <Admin MailboxDN> Optional arguments: <filename> is a filename to which handheld information is dumped. If it is not specified, the information is stored on the screen. -p is a flag to signify a profile <MAPI profilename> is an existing MAPI profile name. -h or -? This command lists all available commands 3. At the command prompt, type a command in the form HandheldCleanup.exe -flag <optional arguments> Fix Mapisvc.inf utility You can use this utility to verify that the MAPI subsystem is initialized. The MAPI profile should be stored in the registry (HKEY_CURRENT_USER/Software/Research In Motion/BlackBerry Enterprise Server/Management/MAPIProfile). An error occurs if a MAPI client is not 176 BlackBerry Enterprise Server Software for Microsoft Exchange

177 BlackBerry Server Permissions tester already present on the server. The fixmapisvc.exe utility enables the BlackBerry Enterprise Server installation to facilitate MAPI Profile creation and editing. Running Fixmapisvc.exe 1. Open either Microsoft Exchange 5.5 Administrator or Microsoft Exchange 2000 System Manager. 2. At a command prompt, switch to the directory in which the installed utilities are stored (root_directory:\\program Files\Research In Motion\BlackBerry Enterprise Server\Utility\). 3. Type Fixmapisvc.exe. 4. If fixmapisv.inf is already stored, the following message appears: MSEMS service information already exists in C:\Program Files\Common Files\System\Mapi\1033\NT\mapisvc.inf Otherwise, fixmapisvc.exe registers mapisvc.inf in that location. BlackBerry Server Permissions tester IEMSTest.exe is a utility that tests permissions on the BlackBerry Enterprise Server. Running IEMSTest.exe 1. At a command prompt, switch to the directory on which the installed utilities are stored (root_directory:\\program Files\Research In Motion\BlackBerry Enterprise Server\Utility\). 2. Type IEMSTest.exe. The Choose Profile dialog box appears. Choose Profile dialog box Administration Guide 177

178 Chapter 11: Using the command line utilities 3. From the Profile Name drop-down list, select the correct BlackBerry Enterprise Server MAPI profile. 4. Click OK. The utility connects to the Microsoft Exchange Server and checks permissions. SRP Connection tester Use the BBSRPTest utility to test the BlackBerry Enterprise Server s SRP connection. Running BBSRPTest.exe 1. At a command prompt, switch to the directory in which the installed utilities are stored (root_directory:\\program Files\Research In Motion\BlackBerry Enterprise Server\Utility\). 2. Type BBSRPTest.exe. 3. The utility checks the BlackBerry Enterprise Server s Network Access Node (for example, srp.na.blackberry.net) and confirms whether or not the SRP connection to the wireless network exists. Performance Monitor Repair tool If problems with Performance Monitor counters occur, run BBPerfmoninstall.exe to repair the registration of the performance monitor tool.dll file. Running BBPerfmoninstall.exe 1. At a command prompt, switch to the directory in which the installed utilities are stored (root_directory:\\program Files\Research In Motion\BlackBerry Enterprise Server\Utility\). 2. Type BBPerfmoninstall.exe -uninstall. The utility removes the earlier registration of the.dll file. 3. Type BBPerfmoninstall.exe -install. The utility repairs the registration of the performance monitor.dll file. 178 BlackBerry Enterprise Server Software for Microsoft Exchange

179 Chapter 11: Using the command line utilities BlackBerry Database Consistency Service utility DBConsistency.exe is the Mobile Data Service s database consistency utility and is required by the Mobile Data Service push server. It verifies that user information that is stored in the BlackBerry Enterprise Server Management database (which is also used by Mobile Data Service) is consistent with information stored in users mailboxes. Warning: If you do not get server lists when you run the BlackBerry Database Consistency Service utility because you cannot connect to the Active Directory, verify the value that you set on the BlackBerry Server Management Properties window s Advanced tab, in the Domain to search Exchange Servers field. (Refer to "Configuring visual settings" on page 57 for more information.) The value that you set in this field is added to the BlackBerry Database Consistency Service utility registry settings (the Domain value under the HKEY_LOCAL_MACHINE/Software/Research In Motion/BlackBerry Enterprise Server/DBConsistency key). Running DBConsistency.exe 1. At a command prompt, switch to the directory in which the Mobile Data Service utility is stored (root_directory:\\program Files\Research In Motion\BlackBerry Enterprise Server\MDS\bin\). 2. At the command prompt, type DBConsistency [command]. Note: If you do not run DBConsistency.exe manually, it runs by default at the given update frequency (specified in the Mobile Data Service Properties window Push Server tab) to pick up changes. Refer to "Push Server parameter" on page 48 for more information on changing the update frequency. The default value, which you might have changed during the Mobile Data Service installation, is 24 hours. Commands -remove -install -login=<domain>\<account> -password=<password> -auto Description This command removes the service. This command installs the service. This command sets the login name. This command sets the login password. This command sets the service to start automatically when the system starts. 179 BlackBerry Enterprise Server Software for Microsoft Exchange

180 Chapter 11: Using the command line utilities -manual -debug -console Commands Description This command sets the service to be manually started (default). This command runs DBConsistency.exe in console debug mode. This command runs DBConsistency.exe in console mode. To start or stop the BlackBerry Database Consistency Service use one of the following procedures: 1. Open the Windows Services window. 2. Right-click BlackBerry Database Consistency Service and click Start or Stop. Or 1. At a command prompt, switch to the directory on which the Mobile Data Service utility is stored (root_directory:\\program Files\Research In Motion\BlackBerry Enterprise Server\MDS\bin\). 2. Type DBConsistency 'net [start] DBConsistency'or DBConsistency 'net [stop] DBConsistency. In console mode, hold X to exit DBConsistency.exe. 180 BlackBerry Enterprise Server Software for Microsoft Exchange

181 Chapter 12 Frequently asked questions This section provides information on the following topics: Why can I not generate a license key? What is the recommended database configuration for BlackBerry Enterprise Server version 3.5? After installing the BlackBerry Enterprise Server with the Mobile Data Service, why does my Browser load with nothing displayed? Why do I get a '500' connection timeout error when I try to view web pages on my BlackBerry Browser? Why am I prompted to choose a profile when I start BlackBerry Enterprise Server Management? How do I troubleshoot Mobile Data Service problems? Why do using filters, using encryption keys, and replying to messages often fail? Why has this laptop user's handheld not received messages since the laptop was last connected to the LAN? Why are some messages not forwarded to the user s handheld? Why do users handhelds stay at Initializing after they are added or deleted? What happens to the users when you delete a BlackBerry Enterprise Server?

182 Chapter 12: Frequently asked questions Why is the server status Disabled? Why is the server status SRP Connection Down? Why is wireless calendar synchronization not working? I changed a routing group name in Microsoft Exchange 5.5 but the change is not visible in the BlackBerry Enterprise Server Management console? Why not? How do I obtain additional support? 182 BlackBerry Enterprise Server Software for Microsoft Exchange

183 Why can I not generate a license key? If you remove Microsoft Exchange 5.5 administration extensions before you upgrade the BlackBerry Enterprise Server version 3.5 Service Pack 1 from an earlier installation, you cannot generate a license key. Remove the Microsoft Exchange 5.5 administration extensions only after you upgrade BlackBerry Enterprise Server 3.5 Service Pack 1. What is the recommended database configuration for BlackBerry Enterprise Server version 3.5? The recommended database configuration is one database for each organization. Using multiple databases introduces the risk of having a BlackBerry Enterprise Server on more than one database with a different IT Policy applied in each case. After installing the BlackBerry Enterprise Server with the Mobile Data Service, why does my Browser load with nothing displayed? After initial installation, the Mobile Data Service is configured by default to use port 3200 to communicate with the BlackBerry Enterprise Server. It does not establish that port until you restart the BlackBerry Enterprise Server after installation. View the Mobile Data Service logs located in c:\program Files\Research In Motion\BlackBerry Enterprise Server\MDS\Servers\Servername\Logs. The logs have continuous entries. For example: <6/7/ :8:13> (13)[besbos] LAYER = SRP, Trying to connect to localhost:3200 <6/7/ :8:19> (14)[besbos] LAYER = SRP, Trying to connect to localhost:3200 <6/7/ :8:25> (15)[besbos] LAYER = SRP, Trying to connect to localhost:3200 Administration Guide 183

184 Chapter 12: Frequently asked questions <6/7/ :8:31> (16)[besbos] LAYER = SRP, Trying to connect to localhost:3200 <6/7/ :8:37> (17)[besbos] LAYER = SRP, Trying to connect to localhost:3200 Entries similar to the above indicate that you need to restart the BlackBerry Enterprise Server. After you restart it, run a netstat -a command at the command prompt to verify that the port was established or is listening. Why do I get a '500' connection timeout error when I try to view web pages on my BlackBerry Browser? The 500 connection timeout error occurs when the BlackBerry Enterprise Server with Mobile Data Service is unable to resolve the URL that the handheld requests, or when the handheld is not in good wireless coverage. From the BlackBerry Enterprise Server, verify that you can ping If you are using an HTTP proxy, verify that the proxy is defined correctly in the BlackBerry Enterprise Server Management console's Mobile Data Service Properties window. The error might also be caused by a port conflict on the server. From the BlackBerry Enterprise Server Management console's Mobile Data Service Properties window, review the ports that Mobile Data Service is configured to use, stop the Mobile Data Service, and run a netstat -a command at the command prompt to verify that no other service is trying to use those ports. Why am I prompted to choose a profile when I start BlackBerry Enterprise Server Management? If a Choose Profile dialog box appears when you first start the BlackBerry Enterprise Server Management console, the MAPIProfile entry does not exist in the registry. (This might occur if you are not logged in as a user service account with a MAPI profile.) If a MAPI profile exists, it should be stored in the registry as HKEY_CURRENT_USER/Software/Research In Motion/BlackBerry Enterprise Server/Management/MAPIProfile. 184 BlackBerry Enterprise Server Software for Microsoft Exchange

185 Solution If a MAPI profile does exist, you can select it from the Choose Profile dialog box s Select Name drop-down list, and then click OK to continue. Choose Profile dialog box If a MAPI profile does not exist, complete the following steps to create one: 1. At the command prompt, type regedit. The Registry Editor window appears. 2. Browse to HKEY_CURRENT_USER/Software/Research In Motion/BlackBerry Enterprise Server/Management/. Administration Guide 185

186 Chapter 12: Frequently asked questions 3. In the right pane, right-click and select New > String Value. A new registry entry icon appears. Registry Editor: Creating new string value 4. Type MAPIProfile to name the icon. 5. Double-click MAPIProfile. The Edit String dialog box appears. Edit String dialog box 6. If the Value Data field is empty, type a name for the MAPI profile, and then click OK. 186 BlackBerry Enterprise Server Software for Microsoft Exchange

187 7. To view and edit the MAPI profile, from the Start menu, select Programs > BlackBerry Enterprise Server > Edit the MAPI Profile for > BlackBerry Server Management. The Microsoft Exchange Server dialog box appears. Microsoft Exchange Server dialog box Note: If the Microsoft Exchange Server dialog box does not appear, and you receive the error, Unable to find Exchange Server MAPI component, you should verify that the MAPI subsystem is initialized by opening either Microsoft Exchange 5.5 Administrator or Microsoft Exchange 2000 System Manager, and then run the fixmapisvc.exe utility. This error occurs because a MAPI client is not already present on the server. The fixmapisvc.exe utility enables the BlackBerry Enterprise Server installation to facilitate MAPI Profile creation and editing: Change to the Tools directory on the BlackBerry Enterprise Server installation CD. Run fixmapisvc.exe and specify the mapisvc.inf file as follows: "fixmapisvc.exe c:\winnt\system32\mapisvc.inf" and then try to create the MAPI profile again. 8. Click Check Name to confirm both the server and mailbox names you specified. 9. When both names appear underlined, click OK. 10. Open BlackBerry Enterprise Server Management. You should no longer be prompted for a profile. If you are prompted for a profile, check the registry setting to verify that the MAPIProfile setting is correct. Administration Guide 187

188 Chapter 12: Frequently asked questions How do I troubleshoot Mobile Data Service problems? If users have problems using the Mobile Data Service, follow these steps to diagnose and fix the problem. 1. Verify that the user has the IPPP service book entries (in the Options application, click Service Book, and look for an entry called IPPP Browser Config). 2. If this service book is not present, contact the network operator. On the BlackBerry 5800 Series and BlackBerry 6700 Series of wireless handhelds, the IPPP service book must be provisioned as part of the handheld registration process. 3. Verify that the Mobile Data Service is running. You can view information about the Mobile Data Service in one of two ways: Check the log files in the Mobile Data Service installation directory. Open a Browser and go to and 4. Verify that you enabled the Mobile Data Service on the BlackBerry Enterprise Server. 5. Verify that the user is on the BlackBerry Enterprise Server on which you installed and enabled the Mobile Data Service, and that the user is enabled for Mobile Data Service. 6. Verify that the BlackBerry Enterprise Server is using the correct MAPI profile for the user. 7. Verify that the user has configured their Browser to use an IPPP service: In the Browser application, on the menu, click Options. The Browser Options screen appears. Click Browser Configuration. The Browser Configuration screen appears. Select the Choose Browser Config setting. A Browser configuration option should be selected. 188 BlackBerry Enterprise Server Software for Microsoft Exchange

189 Why do using filters, using encryption keys, and replying to messages often fail? Symptoms Filters are not being applied to messages: the filters listed in the Redirector Settings window of the user s BlackBerry Desktop Software don't appear to function. Encryption key problems: users update their keys at the desktop and still receive encryption failure messages. Handhelds will only function if they are plugged in at the BlackBerry Enterprise Server (mailbox extension) and Microsoft Exchange keys. Forwarding, Replying with text, and More features frequently fail: features are failing when users have not deleted or moved a message from the Inbox. The BlackBerry Enterprise Server does not work for users (mostly laptop) who use Personal Folders as their main message store. The BlackBerry Enterprise Server monitors the user's MAPI store on the Microsoft Exchange Server. Personal Folders are a local MAPI store that resides on the users computer (or laptop). The server does not have access to MAPI stores on individual computers. The BlackBerry Desktop Manager stores encryption keys and filter configuration in the default MAPI message store. If the user has his/her computer configured to use Personal Folders, the above symptoms might appear. When Personal Folders are used (and MAPI is configured to deliver mail to Personal Folders) and Outlook is running, mail is moved (and deleted) from the Microsoft Exchange Server's store to the local Personal Folder store. When the BlackBerry Enterprise Server tries to find the original in the Microsoft Exchange Server's message store when performing a Forward, Reply with Text, or More, the message is no longer there it has been moved to the user's computer. Solution The user should migrate from using Personal Folders to using Offline Folders. Personal Folders is a legacy feature of Microsoft Mail. The main reason people use Personal Folders is to retain a local copy of their mail. When users disconnect from the network, they can still read their (therefore Personal Administration Guide 189

190 Chapter 12: Frequently asked questions Folders usage is more common among laptop users). This is why Offline Folders (.ost files) were introduced in Microsoft Outlook. With Offline Folders, mail is synchronized (in other words, replicated) between the Microsoft Exchange Server message store and the local message store. This provides the benefit of local copies for offline viewing and centralized storage so the IT department can backup the company's mail on a regular basis. Because mail is left on the Microsoft Exchange Server with Offline Folders, the BlackBerry Enterprise Server redirects properly. Why has this laptop user's handheld not received messages since the laptop was last connected to the LAN? If the user is running BlackBerry Desktop Software (with BlackBerry Enterprise Server client) on a laptop that is connected to a LAN, and the handheld is connected to the laptop, the user must exit the BlackBerry Desktop Manager software before disconnecting the notebook from the LAN. If the user does not remove the handheld from the cradle (or exit the BlackBerry Desktop Manager) before disconnecting the laptop from the LAN, the server is not notified that the handheld is no longer in the cradle. Therefore, if the Don't forward messages while the handheld is in the cradle option is enabled, no is forwarded to the handheld because the server believes it is still in the cradle. Solution The BlackBerry Enterprise Server removes the In-cradle status automatically within 10 minutes if it does not detect the BlackBerry Desktop Manager in use. You can also clear the In-cradle status manually. 1. Open BlackBerry Enterprise Server Management. The Tree view expands automatically and displays a list of BlackBerry Server site/routing groups. 2. Expand a BlackBerry Server site/routing group item, and then select a server name. 3. From the User Name list, double-click a user name. The user s Properties window appears. 4. Click Clear-In-Cradle. The In-cradle flag is removed and redirection resumes. 190 BlackBerry Enterprise Server Software for Microsoft Exchange

191 Why are some messages not forwarded to the user s handheld? There are a few reasons why messages are not forwarded to a user s handheld. Global redirection filters are applied to conditions for which the user has defined filters. If users are hidden in the Global Address list and they have installed the default BlackBerry desktop filter To & BCC, the filter fails when users are BCC d because the users cannot be found in the Global Address List. Administrators are not able to All Points Bulletin messages to hidden users if they have the Default filter enabled. To resolve this problem, send PIN-based All Points Bulletin messages to hidden users. Why do users handhelds stay at Initializing after they are added or deleted? There are a few possible reasons why a user s status reads Initializing after the use is added to or deleted from a BlackBerry Enterprise Server. After you add users, their status remains Initializing until they connect their handhelds to their computers. BlackBerry Enterprise Server service must be running to change a user s status after they have been added to or deleted from the BlackBerry Enterprise Server. From the Control Panel window, open Services and check that the BlackBerry Enterprise Server status reads Started. What happens to the users when you delete a BlackBerry Enterprise Server? If you delete a BlackBerry Enterprise Server from the BlackBerry Enterprise Server Management computer, all of its users are removed. The users are automatically reassigned as desktop redirector users, but they must connect to the desktop redirector before redirection occurs. If you delete only the database, you can still restore users by re-adding the BlackBerry Enterprise Server on which the users are listed, because the users' information is stored in the BlackBerry Enterprise Server service account mailbox. Administration Guide 191

192 Why is the server status Disabled? The SRP Connection is present, but your BlackBerry Enterprise Server is not running. Solution 1. From the Control Panel window, open Services and check that the BlackBerry Enterprise Server status reads Started to verify that the BlackBerry Enterprise Server service is running. If the service is running, your second point of verification is the Windows NT Event Viewer. 2. Open the Windows NT Event Viewer. 3. From the Log menu, click Application Log, and scan for BlackBerry logs that contain error messages (particularly those pertaining to misnamed MAPI profiles). You can also check your debug log for any recent BlackBerry Enterprise Server entries. Why is the server status SRP Connection Down? While the BlackBerry Enterprise Server is running, the Service Relay Protocol (the BlackBerry link to the wireless network) is disconnected. Solution Check that Domain Name System (DNS) is set up properly on the server computer. The system might not be able to resolve or find SRP HOST (indicated in italics because the value is variable; refer to the label on your installation CD for the correct SRP Host value), which is the Network Address Node that is specified during installation. You can run the BBSRPTEST utility to determine where the connection process is failing.

193 1. Copy BBSRPTEST to the computer that is running the BlackBerry Enterprise Server. 2. At a command prompt, run the BBSRPTEST.exe with no additional parameters. The utility will read the settings from the registry and attempt to connect to the SRP host server. The following message should appear: Attempting to connect to srp host (IP Address), port 3101 Successful where srp host and IP Address are indicated in italics because the values are variable; refer to the label on your installation CD for the correct SRP Host value and IP Address. You might see one of the following messages instead: gethostbyname() failed for name srp host: error code = This message indicates a configuration problem on your computer, as it is unable to look up the SRP host server's name means that the name is not found. connect() failed: error code = This message indicates that no one is answering the connection request, or the firewall "swallowed" the connection request means a timeout occurred. connect() failed: error code = This message indicates that the connection was refused; either the SRP host server is not running or the firewall prevented the connection from going through means the connection was refused. recv(): connection lost This message indicates that the connection was broken (by the firewall or proxy) before the test program could handshake with the SRP host server. The error code that is listed is the Winsock error code.

194 Chapter 12: Frequently asked questions Why is wireless calendar synchronization not working? If Microsoft Outlook is installed on the BlackBerry Enterprise Server computer, wireless calendar synchronization will not work. The version of CDO.dll and the MAPI.dll that are included in the Microsoft Outlook package are unable to support wireless calendar synchronization. To perform wireless calendar synchronization, BlackBerry Enterprise Server version 3.5 requires the correct versions of the CDO.dll and MAPI.dll files. (Refer to "System requirements" on page 18 for more information.) Solution 1. Remove Microsoft Outlook. 2. Verify that CDO is re-registered: from the command line, change to c:\winnt\system32 and execute the following command: regsvr32 cdo.dll 3. Reconfigure the MAPI version: Microsoft Exchange Administrator installs its copy of MAPI32.DLL into the c:\winnt\system32 directory. When Microsoft Outlook is installed, it renames that file to MAPI32x.DLL and installs its own MAPI32.DLL. 4. Rename MAPI32.DLL to MAPI32.DLL.OUTLOOK (or another name as desired), and copy MAPI32x.DLL to MAPI32.DLL. I changed a routing group name in Microsoft Exchange 5.5 but the change is not visible in the BlackBerry Enterprise Server Management console? Why not? For a change that you made in Microsoft Exchange 5.5 to a routing group name to be reflected in the BlackBerry Enterprise Server Management console, it is not sufficient to refresh the console. You must shut down the BlackBerry Enterprise Server Management console and then reopen it for the name change to take effect. 194 BlackBerry Enterprise Server Software for Microsoft Exchange

195 Chapter 12: Frequently asked questions How do I obtain additional support? Contact your point of purchase of your license for BlackBerry Enterprise Server Software. 195 BlackBerry Enterprise Server Software for Microsoft Exchange

196 Chapter 12: Frequently asked questions 196 BlackBerry Enterprise Server Software for Microsoft Exchange

197 Chapter 13 Error and Event messages This section provides information on the following topics: 5301 Startup error 5302 Windows error 5401 Windows error No Service Name Error (5403 or 5404) No routing groups found in the BlackBerry Enterprise Server Management console BlackBerry User Administration service error codes

198 Chapter 13: Error and Event messages 5301 Startup error Error numbers that begin with 53 are associated with MAPI problems. Error numbers that begin with 54 are associated with administration configuration problems. Symptoms When you try to start the BlackBerry Enterprise Server, a 5301 Windows error occurs. What is the problem? Microsoft Outlook was removed from the BlackBerry Enterprise Server computer after Microsoft Exchange 5.5 (Service Pack 4) was installed. The removal of Outlook interfered with the MAPI version that is required by BlackBerry Enterprise Server version 2.1. Solution 5302 Windows error Reinstall Microsoft Exchange 5.5 (Service Pack 4). Symptoms When you try to start the BlackBerry Enterprise Server, a 5302 Windows error occurs. What is the problem? Several problems might cause this error: Problem 1: The MAPI Profile that is specified is incorrect. Solution 1: Check the MAPI Profile that is specified for the BlackBerry Enterprise Server and verify that it is linked to a Windows NT account with Service Account Admin permissions. Also verify that the profile only contains the following services: Microsoft Exchange Server, Outlook Address Book, and Personal Address Book. Remove any other services, such as Internet Mail. 198 BlackBerry Enterprise Server Software for Microsoft Exchange

199 5401 Windows error 5401 Windows error Problem 2: The account that was used to start the BlackBerry Enterprise Server is incorrect. Solution 2: From the Start menu, select Settings > Control Panel. The Control Panel window appears. Double-click the Services icon. The Services window appears. Click Startup and verify that the Log On As section has the correct account selected for the BlackBerry Enterprise Server service. This account should be the same one that was used to install the BlackBerry Enterprise Server files. Symptoms When you try to start the BlackBerry Enterprise Server, a 5401 Windows error occurs. What is the problem? Several problems might cause this error: Problem 1: No BlackBerry Enterprise Server is added. Solution 1: Complete the procedure below. 1. In the BlackBerry Enterprise Server Management interface, right-click the site/routing group. 2. Select New BlackBerry Server. 3. In the BlackBerry Servers System Info window, define the following System Information: In the Server Name field, type the same server name that you used during the installation. In the SRP Identifier and SRP Authentication Key fields, type the appropriate information that is provided on the installation CD label. In the Administration Mailbox field, click Select Mailbox to locate the mailbox that you set up for BlackBerry Enterprise Server administration. 4. After you complete all of the fields, click OK. Administration Guide 199

200 Chapter 13: Error and Event messages Problem 2: The BlackBerry Enterprise Server that has been added is not the same as the one that was specified in the BlackBerry Enterprise Server installation. Solution 2: Complete the procedure below. 1. At a command prompt, type regedit. The Registry Editor appears. 2. Browse to HKey_Local_Machine\Software\Research In Motion\BlackBerry Enterprise Server\Servers\. 3. Double-click the Name key. The Edit String dialog box appears. 4. In the Value data field, type the name of the server that is located in the BlackBerry Enterprise Server Properties window. Or 1. Open Microsoft Exchange Administrator. 2. From the Configuration container, open the BlackBerry Servers Properties window. 3. Click Remove Server. The current BlackBerry Enterprise Server is removed. 4. Click Add Server. Type the same server name that is listed in the BlackBerry Enterprise Server Files installation in the Server Name field and complete the rest of the process. Problem 3: The administration mailbox that was selected when you added the BlackBerry Enterprise Server is incorrect. Solution 3: Complete the procedure below. 1. In the BlackBerry Enterprise Server Management interface, right-click the site/routing group. 2. Click Remove Server to remove the current BlackBerry Enterprise Server. 3. Click Add Server. From the list, select the correct Administration Mailbox from the list (the mailbox that is linked to the Windows NT account that you used to install the BlackBerry Enterprise Server). 200 BlackBerry Enterprise Server Software for Microsoft Exchange

201 No Service Name Error (5403 or 5404) No Service Name Error (5403 or 5404) Symptoms When you try to proceed with the BlackBerry Enterprise Server installation, a 5403 or 5404 Windows error occurs. What is the problem? This error indicates that the user has typed an incorrect server name. The Microsoft Exchange Server name is often mistakenly typed instead of the BlackBerry Enterprise Server name. Solution Open the BlackBerry Server System Info window and verify that the correct BlackBerry Enterprise Server name appears in the Server Name field. No routing groups found in the BlackBerry Enterprise Server Management console Symptoms When you open BlackBerry Enterprise Server Management in a Microsoft Exchange 5.5 environment, no routing groups appear, and the following error message appears in the debug log: [10132] Unable to open LDAP://servername (err = 0xXXXXXXXX)) Error codes in the debug log for this issue are 0x a and 0x What is the problem? Check for any or all of the following possible causes for this problem: Problem 1: The correct permissions have not been set. Problem 2: The correct LDAP directory defaults are not set on the server. Problem 3: If you are using only Microsoft Exchange 5.5 Servers in a Windows 2000 environment, you might need to create or modify an existing Exchange5.5 key in the registry. Administration Guide 201

202 Chapter 13: Error and Event messages Solution1: Setting permissions Verify that you have set one of the following permissions: Local administrator permissions on the BlackBerry Enterprise Server service computer in Microsoft Exchange 5.5 Microsoft Exchange View Only Administrator (minimum) access is required at the Administrative Groups level in Microsoft Exchange 2000 to be able to read from the Active Directory. Solution 2: Changing LDAP settings Verify the correct LDAP default settings at the site level and server level. At the site level 1. Open Microsoft Exchange 5.5 Administrator. 2. In the left pane, at the site level, select Configuration > Protocols. 3. In the right pane, double-click LDAP (Directory) Site Defaults. The LDAP Directory Site Defaults Properties window appears. 4. On the General tab, verify that the value in the Port number field is 389. You can change the LDAP port value in Microsoft Exchange 5.5 Administrator to prevent a port conflict with Active Directory, but you must change the LDAP port value in BlackBerry Enterprise Server Management, on the BlackBerry Enterprise Server Management window Advanced tab. Refer to "Configuring visual settings" on page 55 for more information. 5. On the General tab, verify that Enable protocol is selected. 6. On the Authentication tab, verify that Windows NT Challenge/Response is selected. 7. Click OK to accept any changes. 8. Reboot the Microsoft Exchange Server for the changes to take effect. At the server level 1. Open Microsoft Exchange 5.5 Administrator. 2. In the left pane, at the site level, select Configuration > Servers. 3. In the left pane, expand the Servers list, and then click a server. 4. In the right pane, double-click Protocols. 202 BlackBerry Enterprise Server Software for Microsoft Exchange

203 No routing groups found in the BlackBerry Enterprise Server Management console 5. In the right pane, double-click LDAP (Directory) Settings. The LDAP (Directory) Settings Properties window appears. If the Use site defaults for all properties option is selected, you do not need to complete the remaining steps, because the correct values will default from the site settings you already verified. 6. On the General tab, verify that the value in the Port number field is 389. You can change the LDAP port value in Microsoft Exchange 5.5 Administrator to prevent a port conflict with Active Directory, but you must change the LDAP port value in BlackBerry Enterprise Server Management, on the BlackBerry Enterprise Server Management window Advanced tab. Refer to "Configuring visual settings" on page 55 for more information. 7. On the General tab, verify that Enable protocol is selected. 8. On the Authentication tab, verify that Windows NT Challenge/Response is selected. 9. Click OK to accept any changes. 10. Reboot the Microsoft Exchange Server for the changes to take effect. Solution 3: Setting the Exchange 5.5 registry key If you are using only Microsoft Exchange 5.5 Servers in a Windows 2000 environment, you may need to create or modify an existing Exchange5.5 key in the registry before you can see your routing groups in BlackBerry Enterprise Server Management. 1. At the command prompt, type regedit. The Registry Editor window appears. 2. Browse to HKey_Local_Machine/Software/Research In Motion/BlackBerry Enterprise Server/Management/. 3. In the right pane, if the Exchange5.5 registry key appears, double-click it. OR If the Exchange5.5 registry key does not appear, right-click and select New > DWORD Value. A new registry entry icon appears. Type Exchange55 to name the icon. Double-click Exchange55. Administration Guide 203

204 4. The Edit DWORD value dialog box appears. 5. In the Value data field, type Click OK. Edit DWORD value dialog box BlackBerry User Administration service error codes The following table describes the error codes that are associated with the BlackBerry User Administration service. Flag Description 1 The action was successfully completed. 2 The service is busy adding the defined users. Multiple users might be accessing the service. 3 The service is busy deleting the defined users. Multiple users might be accessing the service. 4 The service is busy initializing. 5 No profile is available for the server. 6 The service is unable to retrieve the server s Domain Name. Verify that it was properly defined in the MAPI profile text file or on the command line. 7 The MAPI logon failed. Verify the profile and server mailbox were correctly defined in the MAPI profile text file. 8 The service was unable to retrieve the message store table. This is a MAPI-related error. Verify that the service has the necessary permissions and that there are no network problems. 9 The service was unable to query all rows in the message store table. This is a MAPI-related error. Verify that the service has the necessary permissions and that there are no network problems.

205 Flag Description 10 The service was unable to open the message store table. This is a MAPI-related error. Verify that the service has the necessary permissions and that there are no network problems. 11 The service was unable to locate the default message store table. This is a MAPI-related error. Verify that the service has the necessary permissions and that there are no network problems. 12 The service was unable to communicate with the query interface. This is a MAPI-related error. Verify that the service has the necessary permissions and that there are no network problems. 13 Database creation failed. This is a MAPI-related error, which could be associated with one of the following problems: the service does not have the necessary permissions there are network problems the wrong mailbox is associated with the service the server might not have been added to the extensions 14 The service was unable to open the server database. Verify that the correct server name is defined in the MAPI profile text file. This is a MAPI-related error. Verify that the service has the necessary permissions and that there are no network problems. 15 The service was unable to open the Global Address Book. 16 The MAPI allocate buffer failed. 17 The service was unable to open Server Manager. Verify that the BlackBerry Enterprise Server extensions are installed on the server. 18 The MAPI initialization failed. Verify that the service has the necessary permissions and that there are no network problems. 19 The service was unable to get user information. Verify that the user was correctly defined in the input file or at the command line. 20 The user exists on the server. With the -c switch, this flag confirms that the user is on the specified server. With the -a or -f switch, this flag confirms that the user was already added. 21 The user does not exist on the server. With the -c switch, this flag confirms that the user is not on the specified server. With the -d or -g switch, this flag confirms that the user was already deleted or never existed on the server. 22 The service was unable to retrieve the user list. Verify that you defined the correct server name. 23 The user that you are adding already exists on another server.

206 Chapter 13: Error and Event messages Flag Description 24 The service is busy listing users. Multiple users might be accessing the service. 25 The server does not exist. Verify the profile and server mailbox were correctly defined in the MAPI profile text file. 26 No session ID found. 27 The service is busy checking users. 28 The license count is exceeded. 29 Initialization of Active Directory Service failed (ADSI is required on the computer; refer to Preinstallation requirements in the BlackBerry Enterprise Server for Microsoft Exchange 5.5 Installation and Getting Started Guide and the BlackBerry Enterprise Server for Microsoft Exchange 2000 Installation and Getting Started Guide). 30 This is an ambiguous mailbox name. 31 The BlackBerry Enterprise Server Management database is not found. 32 The license key is not found in database. 33 The user license count is exceeded (warning). 34 The Mobile Data Service license count is exceeded (warning). 35 The user and Mobile Data Service license counts are exceeded (warning). 206 BlackBerry Enterprise Server Software for Microsoft Exchange

207 Index Numerics 5301 error, error, error, error, error, 201 A about BlackBerry Enterprise Server Management, 14 Mobile Data Service, 20 S/MIME and Mobile Data Service, 21 the BlackBerry Enterprise Server Management user interface, 15 the server, 14, 18 this guide, 7, 21 about BlackBerry User Administration Software, 20 adding a third-party IT policy item, 120 filters at server level, 66 filters at the user level, 84 handheld licenses, 54 IT policy, 118 users from a list, 30 users hidden from the Global Address List, 30 users to a server, 29 additional documentation, 8 addresses, auto BCC configuring, 73 administering individual server properties, 63 individual user properties, 81 administration mailbox specify, 29 administration permission, 20 administrative tasks, 25 alert level log messages, 60, 80 All Points Bulletin sending, 111 APB send method, 112 sending, 111 applications handheld, 154 intranet, 154 architecture BlackBerry Enterprise Server, 152 Mobile Data Service, 152 assigning a value to the IT policy, 120 properties across all servers, 53 Auto BCC addresses configuring, 73 automatically refreshing server list, 59 user list, 59 B Backup and Restore utility, 170 BBPerfMonInstall.exe, 10 BBPerfmoninstall.exe, 178 BBSRPTEST, 192 BBSRPTest.exe, 10, 178 BBUserAdminClient.exe, 10 BBUserAdminService.exe, 10 BESAlert Administration Guide 207

208 Index configuring notification, 75 configuring user notification, 77 BESAlert.exe, 9 BESManMMC.msc, 10 BESPerfInfo.dl, 10 BESProfile.exe, 10 bidirectional communication with TCP/IP, 158 BlackBerry Desktop Redirector users create, 105 BlackBerry Enterprise Server architecture, 152 services limit per computer, 29 settings, 28 testing permissions, 177 testing SRP connection, 178 BlackBerry Enterprise Server Management about, 14 BlackBerry Enterprise Server Management console configuring logging, 59 disabling logging, 60 enabling logging, 60 BlackBerry Handheld Statistics, 100, 103, 107, 108 BlackBerry Management level properties assigning, 53 BlackBerry Server Permissions Tester utility, 177 BlackBerry User Administration service client, 20 error codes, 204 BlackBerry User Administration Software about, 20 BlackBerryBackup.exe, 10, 170 BlackBerryServer.exe, 9 BlackBerryServerSNMPAgent.dll, 10 C Centralized Push server, 154 changing a user s handheld, 103 LDAP Port value, 59 characters, special in password, 115 Choose Profile dialog box, 184 clearing In-cradle status, 106 server statistics, 96 client BlackBerry User Administration service, 20 client/server system, 159 COM Port settings, 55 command line utilities Backup and Restore (BlackBerryBackup.exe), 170 BlackBerry Server Permissions Tester, 177 Fix Mapisvc.inf, 176 Performance Monitor repair, 178 SRP connection tester, 178 using, 169 common administrative tasks, 25 communication bidirectional, with TCP/IP, 158 direct, with Mobile Data Service, 159 through a channel, with Mobile Data Service, 160 through a proxy, with Mobile Data Service, 160 communication settings configuring, 55 configuration information, 172 configuring a disclaimer, 72 Auto BCC addresses, 73 BESAlert notification, 75 BESAlert user notification, 77 BlackBerry Enterprise Server logging, 78 BlackBerry Enterprise Server Management console logging, 59 communication settings, 55 database information, BlackBerry Enterprise Server Software for Microsoft Exchange

209 Index handheld licenses, 54 IT policy settings, 118 Mobile Data Service, 39 visual settings, 57 connecting the handheld, 33 to different Windows Domain, 58 connection maximum number of kilobytes per, 43 connections inbound, 156 Mobile Data Service, 156 outbound, 157 content server, 159 createdb.exe, 10 D daily log files for BlackBerry Enterprise Server, 79 for BlackBerry Enterprise Server Management console, 60 data compression enabling, 46 data conversion, 21 Mobile Data Service, 155 data routing, 21 Mobile Data Service, 155 database refreshing, 97 database authentication SQL Server, 57 Windows NT, 57 database information configuring, 56 dbghelp.dll, 9 default policy items, 126, 127 Default policy editing, 123 default policy item list regenerating, 126 default server base query, 46 deleting a third-party IT policy item, 125 BlackBerry Enterprise Server status FAQ, 191 daily log files, 61, 80 global redirection filters, 71 user level redirection filters, 89 desktop users moving, 37 direct communication Mobile Data Service, 159 disabling BlackBerry Enterprise Server Management console logging, 60 handheld, 114, 116 logging for BlackBerry server, 79 Mobile Data Service, 51 Mobile Data Service at the server level, 51 Mobile Data Service at the user level, 51 redirection, 35, 36 disclaimer configuring, 72 docking cradle, 91 using, 33 drag-and-drop of users, 17 to move user to new server, 104 E editing a policy userlist, 127 a third-party policy item, 122 global redirection filters, 69 policy key items, 127 system information, 64 the Default policy, to-PIN mapping updating, 97 empty routing groups hiding, 58 enabling Administration Guide 209

210 Index BlackBerry Enterprise Server Management console logging, 60 data compression, 46 logging for BlackBerry server, 79 Mobile Data Service, 49 Mobile Data Service, server level, 49 Mobile Data Service, user level, 50 redirection, 35 S/MIME encryption server level, 74 user level, 90 encryption key FAQs, 183 generating at server level, 91 encryption key failure FAQ, 189 encryption key, Peer-to-Peer resending, 117 entering Host Routing Information, 29, 65 SRP Authentication Key, 29, 65 SRP Identifier, 29, 65 error codes BlackBerry User Administration service, 204 error notification Mobile Data Service, 158 errors, , , , , , 201 MAPI profile, 198 no service name, 201 unable to find Microsoft Exchange Server MAPI component, 187 errors and event messages, 197 event messages, 197 exporting user information, 109 F FAQ, 184 FBUpdate.exe, 11 filter tasks user level, 84 filters creation guidelines, 68, 86 failure, FAQ, 189 FAQs, 183 options, 87 filters, server level adding, 66 deleting, 71 editing, 69 modifying, 69 filters, user level deleting, 89 Fix Mapisvc.inf utility, 176 fixmapisvc.exe, 11, 187 flow control timeout (milliseconds), 43 frequently asked questions, 181 changing routing group name, 194 deleted users, 191 failure of encryption keys, 183 failure of filters, 183 failure of replying, 183 laptop not receiving messages, 190 laptop user, 190 server status is Disabled, 190, 192 SRP connection down, 192 user status Initializing, 191 G General parameters Mobile Data Service, 42 general server properties, 53 generating an encryption key serial connection required, 91 encryption key, 91 getting started, BlackBerry Enterprise Server Software for Microsoft Exchange

211 Index Mobile Data Service, 39 global redirection filters, 84 adding, 66 creating guidelines, 68, 86 deleting, 71 modifying, 69 server level, 66 global statistics viewing, 96 guidelines for creating filters, 68, 86 H handheld applications, 154 changing, 103 disabling, 114, 116 enabling Mobile Data Service, 50 kill, 114, 116 license, adding, 54 locking and setting password, 114 not receiving messages FAQ, 190 handheld license configuring, 54 HandheldCleanup.exe, 11 hidden IT policy menu items, 114 hiding empty routing groups in scope pane, 58 Host Routing Information entering, 29, 65 HTTP and Mobile Data Service, 159 HTTP parameters Mobile Data Service, 44 I IEMSTest.exe, 11, 177 importing system information, 108 users from file, 31 users from Global Address Book, 32 inbound connections, 156 In-cradle status clearing, 106 installation documentation, 9 insufficient BlackBerry Enterprise Server Management permissions logging, 79 intranet applications, 154 intranet data management, 152 IPPP Browser Config Service Book FAQ, 188 IT Admin properties, 93 IT policy adding, 118 assigning value, 120 deleting third-party item, 125 editing userlist, 127 managing, 113 menu items hidden, 114 over-the-air, 118 settings, reference, third-party item, 120 IT policy settings configuring, 118 K kill handheld, 114, 116 L laptop connected to LAN FAQ, 190 LDAP parameters and S/MIME digital signing, 46 LDAP Port value changing, 59 license, handheld configuring, 54 limit per computer BlackBerry Enterprise Server services, 29 load filter settings, 69 locking handheld, 114 log file keep daily for BlackBerry Enterprise Server, 79 keep daily for BlackBerry Enterprise Administration Guide 211

212 Index Server Management console, 60 setting expiry, 61, 80 setting maximum size, 60, 79 specify filename, 60, 80 log messages alert level, 60, 80 logging BlackBerry Enterprise Server, 78 disabling for BlackBerry server, 79 enabling for BlackBerry server, 79 insufficient BlackBerry Enterprise Server Management permissions, 79 logging, console configuring, 59 disabling, 60 enabling, 60 M mailbox administration, 29 maintenance of server tasks, 95 Managing, 113 managing IT policy, 113 MAPI profile error, 198 MAPI subsystem initialized verify, 176 mappings Mobile Data Service, 155 maximum number of kilobytes per connection, 43 message error and event, 197 flow, reporting, 99 laptop not receiving, FAQ, 190 not receiving, FAQ, 190 pending, purging, 107 reply to failure, FAQ, 189 S/MIME encrypted, enabling, 90 sending to user, 110 Microsoft Exchange Server unable to find MAPI component, 187 Mobile Data Service architecture, 152 communication through a channel, 160 communication through a proxy, 160 configuring, 39 connections, 156 data conversion, 155 data routing, 155 direct communication, 159 disabling, 51 disabling at server level, 51 disabling at user level, 51 enabling, 49 enabling at server level, 49 enabling at user level, 50 enabling on BlackBerry 5800 Series and BlackBerry 6700 Series of wireless handhelds, 50 error notification, 158 mappings, 155 monitoring and understanding, 151 proxy function, 155 troubleshooting, 188 Mobile Data Service configuration prerequisite tasks, 40 Mobile Data Service parameters General, 42 HTTP, 44 OCSP, 48 TLS and HTTPS, 47 modifying global redirection filters, 69 LDAP Port value, 59 user level redirection filters, 87 Monitor Agent Listen Port, 43 monitoring Mobile Data Service, 151 monitoring redirection, 99 moving desktop users to the server, 37 user, BlackBerry Enterprise Server Software for Microsoft Exchange

213 Index multiple servers selecting, 111 multiple-selection of users, 17 N no service name error, 201 notification levels, 76 O obtaining additional support, 195 OCSP Parameters Mobile Data Service, 48 outbound connections, 157 over-the-air IT policy, 118 overview this guide, 13 owner information setting, 114 P package contents, 9 password, special characters in, 115 Peer-to-Peer encryption key resending, 117 updating, 98 pending messages purging, 107 Performance Monitor Repair utility, 178 PIN-to-PIN encryption key resending, 117 updating, 98 policy adding, 118 editing Default, 123 policy item default, 126, 127 destination, 123 managing, 113 regenerating default list, 126 third-party, 120 types, 123 policy key items editing, 127 policy userlist editing, 127 properties all servers in site/routing group, 53 proxy function of Mobile Data Service, 155 purging pending messages, 107 Push Server Connection Listen Port, 42 Q query limit, 46 R redirection disabling, 35, 36 enabling, 35 monitoring, 99 redirection filters deleting, 89 guidelines, 68, 86 redirection filters, user level modifying, 87 Redirector Filters (.rfi) file, 69 refreshing database, 97 refreshing, automatically server list, 59 user list, 59 regenerating the default policy item list, 126 register new PIN, 103 reloading users, 99 removing server, 105 repair registration Performance Monitor, 178 reply to messages failure FAQ, 189 replying, FAQs, 183 resending Administration Guide 213

214 Index Peer-to-Peer encryption key, 117 Result view pane, 15 retrieve and update for servers and users, 172 routing group hiding, empty, 58 name change, FAQ, 194 S S/MIME and Mobile Data Service, about, 21 desktop requirements, 22 digital signing and LDAP parameters, 46 enabling encrypted messages, 90 enabling encryption, 74 Secure Multipurpose Internet Mail Extensions (S/MIME), 21 security, 154 select log messages level of alert, 60, 80 selected servers only status visible, 58 selecting multiple servers, 111 send method APB, 112 sending a message, 110 sending an All Points Bulletin, 111 server about, 14, 18 administering properties, 63 availability, 16 Centralized Push, 154 compatibility, 19 disabling logging for, 79 enabling logging for, 79 functions, 18 maintenance tasks, 95 overview, 13 removing, 105 settings, 28 starting, 17 statistics, clearing, 96 statistics, viewing, 96 status Disabled, FAQ, 190, 192 status of selected, 58 stopping, 17, 105 server level S/MIME encryption enabling, 74 server list refreshing automatically, 59 server properties assigning, 53 server routing protocol (SRP) status, 16 services limit per computer, 29 setting Auto BCC addresses, 73 expiration, log files, 61 maximum size, log file, 60, 79 owner info, 114 password, 114 password on handheld, 114 setting expiration log files, 80 settings BlackBerry Enterprise Server, 28 server, 28 settings, IT policy configuring, 118 showing server status information only for selected servers, 58 signature disclaimer configuring, 72 SMTP Helo Login Name, 76 SMTP server machine, 76 special characters in password, 115 specify administration mailbox, 29 SQL Server Authentication, 57 SRP and Server Status indicators, 16 Authentication Key, entering, 29, 65 connection down, FAQ, 192 Connection Tester utility, BlackBerry Enterprise Server Software for Microsoft Exchange

215 Index Identifier, entering, 29, 65 starting server, 17 status user, 83 status field not updating, 37 status of selected servers showing, 58 status, In-cradle clearing, 106 stopping server, 17, 105 support obtaining, 195 system client/server, 159 system information importing, 108 viewing/editing, 64 T TCP/IP, bidirectional communication, 158 technical support obtaining, 195 testing permissions, BlackBerry Enterprise Server, 177 SRP connection, BlackBerry Enterprise Server, 178 third-party IT policy item adding, 120 third-party policy item, 120 editing, 122 TLS and HTTPS parameters Mobile Data Service, 47 transcoding, 155 Tree view pane, 15 Triple Data Encryption Standard (DES) encryption technology, 21 troubleshooting Mobile Data Service, 188 U understanding Mobile Data Service, 151 updating Peer-to-Peer encryption key, 98 updating -to-PIN mapping, 97 usage statistics exporting, 109 user BESAlert notification, 77 changing handheld, 103 information, exporting, 109 moving, 104 properties, administering, 81 properties, viewing, 82 status, 83 status Initializing, FAQ, 191 user level filters adding, 84 deleting, 89 modifying, 87 tasks, 84 user level S/MIME encrypted messages enabling, 90 user list refreshing automatically, 59 userlist, IT policy editing, 127 users reloading, 99 using the command line utilities, 169 utilities Backup and Restore (BlackBerryBackup.exe), 170 BBSRPTEST, 192 Fix Mapisvc.inf, 176 Performance Monitor repair, 178 permissions tester, 177 SRP connection tester, 178 utilities, command line using, 169 Administration Guide 215

216 Index V verify MAPI subsystem is initialized, 176 viewing global statistics, 96 server statistics, 96 system information, 64 user properties, 82 visual settings configuring, 57 W Web Server Listen Port, 43 Windows NT Authentication, 57 wireless handheld changing, 103 enabling Mobile Data Service, 50 wireless synchronization IT policy items, BlackBerry Enterprise Server Software for Microsoft Exchange

217

218 2002 Research In Motion Limited Published in Canada